liveapp-eng[.]wixstudio[.]com

This domain, liveapp-eng.wixstudio.com, operates as a credential harvesting phishing site designed to deceive users into submitting sensitive login information. The site impersonates trusted platforms, likely leveraging social engineering tactics to trick victims into entering usernames, passwords, or other authentication details. Once captured, this data is typically exfiltrated to attacker-controlled servers for unauthorized access to accounts or financial fraud. Analysis indicates the domain is malicious based on multiple technical indicators. It is flagged by 11 out of 95 security vendors on VirusTotal, appears on one security blocklist, and was registered through GoDaddy.com, LLC on April 25, 2026—an unusually future-dated creation that may indicate domain spoofing or registry manipulation. The site resolves to the IP address 34.144.206.118 and uses a Let's Encrypt SSL certificate, which, while providing encryption, does not guarantee legitimacy. Infrastructure analysis reveals the use of Wix, React, Google Cloud, and Google Cloud CDN, suggesting an attempt to blend in with legitimate web traffic. If you visited liveapp-eng.wixstudio.com or entered any information on the site, immediate action is required. First, reset passwords for any accounts accessed or credentials entered on the site, prioritizing email, banking, and work-related logins. Enable multi-factor authentication (MFA) where available to add an additional security layer. Monitor accounts for unauthorized transactions or suspicious activity, and report any anomalies to the respective service providers. Additionally, scan your device for malware using updated security tools, as phishing sites may deploy malicious payloads or redirect to exploit kits. If the domain was accessed in a corporate environment, notify your security team to investigate potential exposure.