live-logon-started[.]wixstudio[.]com

Analysis indicates the domain live-logon-started.wixstudio.com is flagged as a generic phishing host with active status and under investigation risk classification. This domain is suspected of being used as a malicious login page impersonating legitimate service interfaces, designed to harvest user credentials and session tokens. The infrastructure has remained operational since its creation on December 17, 2016.

Infrastructure analysis reveals the domain resolves to IP address 34.144.206.118 and is registered through GoDaddy.com, LLC. Current VirusTotal analysis shows 0 out of 95 security engines flagging the domain as malicious, indicating low detection coverage. No entries on known blocklists were detected during initial scans. WHOIS data shows the domain has been active for over seven years with no changes in registrar or hosting provider, suggesting long-term operational intent.

Mitigation steps for this credential phishing threat include immediate network-level blocking of the domain and associated IP address 34.144.206.118. Security teams should deploy DNS sinkholing for the domain to prevent resolution and block all HTTP/HTTPS requests to the landing path. Users should be notified of potential impersonation attempts and instructed to verify URLs through independent channels before entering credentials. Continuous monitoring of the domain and IP address is recommended due to potential infrastructure shifts.