oversee-legrlive[.]wixstudio[.]com

PhishDestroy identifies oversee-legrlive.wixstudio.com as an active phishing domain operating under a generic_phishing threat classification. This domain impersonates a legitimate service through a spoofed login interface, aiming to harvest user credentials. While no specific brand or drainer kit has been confirmed at this stage, the infrastructure suggests a targeted credential-phishing campaign designed to deceive victims into surrendering sensitive information. The technical footprint of this domain includes a 6/95 detection ratio on VirusTotal, indicating it remains undetected by current antivirus engines. Hosted on 34.144.206.118, the connection is secured via a Let's Encrypt SSL certificate. Further investigation reveals the domain is registered through Wix’s studio platform, which often hosts legitimate content but has been abused in this case. At the time of analysis, this domain has not been flagged by Google Safe Browsing (GSB) and remains absent from major blocklists, contributing to its stealthy operation. The creation date and precise blocklist counts were not available in the provided intelligence. As of the latest assessment, oversee-legrlive.wixstudio.com continues to operate without disruption. Immediate actions include blocking the domain at the network perimeter and advising users to avoid interaction. While the risk level is currently marked as under_investigation, the absence of detections and active hosting status warrant heightened caution. Security teams should monitor for any shifts in behavior or additional IOCs to refine mitigation strategies and reduce potential exposure.