setup-livestart[.]wixstudio[.]com

This domain, setup-livestart.wixstudio.com, is an active phishing endpoint hosted on Wix Studio infrastructure. Registered on December 17, 2016, the domain has been flagged by 12 of 91 security vendors on VirusTotal as malicious, indicating a consensus among multiple detection engines. It appears on at least one security blocklist and is currently blocked by PhishDestroy.

The domain's hosting through Wix Studio suggests it leverages legitimate cloud services to evade initial reputation-based filters, a common tactic in phishing campaigns. No specific brand impersonation or phishing kit has been confirmed in available data, though the domain name implies a potential focus on credential harvesting under the guise of a setup or onboarding process. Defenders should treat this domain as elevated risk due to its multi-vendor detection and active blocklist status.

Recommended actions include blocking the domain at the DNS and proxy levels, monitoring for internal connections to this endpoint, and reviewing logs for prior interactions. The exact content of the phishing page remains unanalyzed, so further investigation is required to determine the targeted brand or service. Given its age and persistent detection, this domain may be part of a long-running campaign or a reused infrastructure component.