uappsupldcdn[.]wixstudio[.]com

PhishDestroy identifies uappsupldcdn.wixstudio.com as a live brand impersonation phishing page masquerading as a legitimate upload service. The domain leverages Wix’s infrastructure to lend false credibility, tricking users into entering sensitive credentials or cryptocurrency wallet details. Security telemetry from VirusTotal confirms zero detections out of 95 engines as of the latest scan, indicating that signature-based defenses have not yet flagged this payload. The domain resolves to IP 34.144.206.118 and holds a valid Let’s Encrypt SSL certificate, further masking its malicious intent. This domain was flagged on seed cb14a6 with a risk status of 'under_investigation' and remains active in the threat landscape. Infrastructure analysis reveals registration through Wix’s subdomain service, which complicates takedown efforts due to shared hosting environments. Despite hosting on a reputable platform, behavioral analysis indicates a clear pattern of impersonation targeting end-users who expect secure file uploads. The absence of detections underscores the need for behavioral detection layers and user vigilance. If you have interacted with uappsupldcdn.wixstudio.com—whether by entering credentials, downloading files, or approving wallet connections—immediately revoke any exposed permissions and rotate passwords. Disconnect affected wallets from suspicious dApps and scan devices for malware. Report the domain to your security team and file a report with the hosting provider and relevant brand impersonated. Enable multi-factor authentication across all accounts and verify URLs via official channels before engaging. Stay alert: this domain is part of a broader campaign targeting trust in cloud services.