vision-live[.]wixstudio[.]com

This domain, vision-live.wixstudio.com, is identified as a generic phishing resource targeting users of the Wix Studio platform. Analysis indicates no explicit brand impersonation beyond the Wix Studio environment itself, though the domain structure suggests an attempt to mimic legitimate Wix-hosted services. No specific drainer kit signatures were observed, but the domain's configuration aligns with common phishing infrastructure patterns, including the use of cloud-based hosting and content delivery networks. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 15 out of 95 security vendors on VirusTotal, registered through GoDaddy.com, LLC, and resolves to the IP address 34.144.206.118. The domain was created on April 30, 2026, an anomalous future date likely indicative of falsified registration data. It appears on one security blocklist, and its SSL certificate is issued by Let's Encrypt. Technologies detected include Wix, React, Google Cloud, and Google Cloud CDN, with HTTP/3 support enabled. The Gridinsoft trust score for this domain is 0/100, reinforcing its malicious classification. As of the latest assessment, vision-live.wixstudio.com has been taken offline, though residual risk remains due to the domain's prior activity. Response actions by hosting providers and security vendors have effectively neutralized the immediate threat, but organizations should monitor for re-activation or similar domains leveraging the same infrastructure. Network defenders are advised to block the domain and its associated IP address in perimeter defenses, and to review logs for prior connections to 34.144.206.118. Users should be cautioned against interacting with any domains mimicking Wix Studio or other cloud-based website builders, particularly those with anomalous creation dates or low trust scores.