globaldesktop[.]wixstudio[.]com

PhishDestroy identifies globaldesktop.wixstudio.com as a live phishing page (generic_phishing) impersonating Microsoft Account credentials. The domain leverages a WixStudio-hosted landing page (34.144.206.118) with a Let's Encrypt SSL certificate, suggesting a basic but functional obfuscation layer to mimic legitimacy. No specific drainer kit (e.g., cryptocurrency wallet drainers) is detected in current telemetry, but the generic phishing payload likely harvests Microsoft login credentials through a spoofed login portal. The domain’s rapid deployment and hosting on a reputable service (WixStudio) implies opportunistic abuse of trusted platforms to bypass initial scrutiny.

Technical indicators for globaldesktop.wixstudio.com include a VirusTotal detection score of 0/95, indicating zero detections by antivirus engines at the time of analysis. The domain resolves to IP 34.144.206.118, hosted on Google Cloud Platform (GCP), with a Let's Encrypt TLS certificate issued by the 'E1' intermediate. Domain registration details remain redacted (privacy-protected via Wix), but the WixStudio subdomain structure suggests recent creation—likely within the past 30 days. Google Safe Browsing (GSB) status is currently unflagged, and third-party blocklists (e.g., PhishTank, OpenPhish) show no active listings. Despite these gaps, the domain’s operational status and weaponized payload warrant immediate scrutiny.

This domain remains ACTIVE as of the latest telemetry, with no mitigation by hosting providers or security vendors. PhishDestroy assesses the risk as HIGH due to the active campaign and lack of detection coverage. Immediate actions include blocking the domain and IP at the network perimeter, flagging the SSL certificate for inspection, and reporting the page to Microsoft’s phishing abuse channels. Users should avoid interacting with the domain and verify any unexpected Microsoft login prompts via official channels. The remaining risk is elevated due to the domain’s bypass of initial detection layers and reliance on widespread trust in Wix-hosted content.