global-live[.]wixstudio[.]com

PhishDestroy identifies global-live.wixstudio.com as an active generic phishing domain currently under investigation for impersonating live customer support services. This domain leverages a Let's Encrypt SSL certificate to appear legitimate, resolving to IP address 34.144.206.118. The threat is classified as a high-risk scam, designed to deceive users into disclosing sensitive information under the pretense of live assistance.

This domain has not yet been flagged by any of the 95 VirusTotal vendors, indicating a low detection rate despite its malicious intent. The domain resolves to a Google Cloud IP (34.144.206.118), a common hosting provider for both legitimate and malicious services. The SSL certificate issued by Let's Encrypt further enhances its credibility, as it is frequently used by threat actors to mimic trustworthy websites. The domain’s infrastructure and hosting details suggest a deliberate effort to evade initial detection mechanisms, posing a significant risk to unsuspecting users.

The current status of global-live.wixstudio.com remains active, with no immediate signs of takedown. Users are strongly advised to avoid interacting with this domain or entering any personal or financial information. To mitigate risk, security teams should monitor traffic to this IP (34.144.206.118) and block it at the network perimeter. Additionally, users should report this domain to their security vendors and avoid clicking on unsolicited links claiming to provide live support. Proactive measures, such as verifying the legitimacy of support channels through official brand websites, are critical to preventing exposure to this scam.