desktop-liveapps[.]wixstudio[.]com

PhishDestroy identifies desktop-liveapps.wixstudio.com as an active fake-login phishing page posing as a desktop app storefront. The domain delivers a spoofed interface designed to harvest usernames and passwords by mimicking a familiar software-download portal. Users arriving via phishing emails or hijacked ads see a convincing replica of a popular app launcher, with the browser address bar and SSL certificate (Let’s Encrypt) adding superficial legitimacy. This site is not affiliated with the genuine publisher and exists solely to capture entered credentials for malicious use. This domain was flagged by PhishDestroy’s real-time crawlers on seed 46695e and resolves to IP 34.144.206.118 under a Let’s Encrypt certificate. VirusTotal currently shows 0 detections out of 95 scanners, confirming zero vendor coverage despite active abuse. The infrastructure is hosted on Google Cloud Platform, leveraging WixStudio’s CDN to blend among millions of benign sites. Because detection gaps can persist for hours to days, manual avoidance remains the most reliable defense until signatures catch up. If you visited desktop-liveapps.wixstudio.com and entered any credentials, assume they are compromised immediately. Change the reused password on every account that shares the same or similar password. Enable two-factor authentication wherever possible to block automated takeover attempts. Run a full antivirus scan on the device used to access the page, as additional malware may have been silently dropped. Report the incident to your IT department or the legitimate app vendor to help shut down the campaign. Forward the phishing email or link to your organization’s security team for takedown requests and to protect others.