global-desktops[.]wixstudio[.]com

PhishDestroy identifies global-desktops.wixstudio.com as an active credential-harvesting domain posing an elevated phishing threat. The domain masquerades as a legitimate desktop service, luring users into submitting login credentials or personal information through fraudulent forms. Analysis confirms this is not a generic phishing attempt but a targeted scam designed to harvest user data for identity theft or account takeover.

This domain was flagged by 8 out of 95 VirusTotal security vendors and appears on two separate blocklists, including PhishingArmy and OISD. It resolves to IP address 34.144.206.118 and operates under a valid Let’s Encrypt SSL certificate, which increases its deceptive credibility. The domain is hosted on the WixStudio platform, leveraging its infrastructure to appear legitimate while concealing malicious intent. These technical indicators, combined with its active status, confirm a sophisticated and ongoing threat.

Users should immediately block this domain at the network and endpoint levels, avoiding any interaction with the site or its subdomains. Organizations are advised to update firewall and proxy rules to deny traffic to 34.144.206.118 and investigate internal DNS queries for potential exposure. If credentials were entered, prompt users to rotate passwords immediately and enable multi-factor authentication. Report this domain to your security team and relevant threat intelligence platforms to enhance collective defense against this credential-harvesting campaign.