# live-endesktop.wixstudio.com — MALICIOUS

> live-endesktop.wixstudio.com is a confirmed Windows license phishing domain flagged by 11/95 VirusTotal engines.

## Summary
PhishDestroy identifies live-endesktop.wixstudio.com as an active phishing domain impersonating Microsoft Windows license validation pages to harvest payment credentials and install malware. The domain spoofs official Microsoft domains using the WixStudio hosting platform to lend false legitimacy. This generic phishing campaign targets users seeking to activate or renew Windows licenses, redirecting victims through deceptive payment portals that exfiltrate financial data and install remote access tools.  

This domain was flagged by 11 out of 95 VirusTotal security vendors at the time of analysis. The domain is registered through Wix.com using a Let's Encrypt SSL certificate and resolves to Google Cloud IP address 34.144.206.118. Creation date analysis shows this domain went live shortly before the first phishing reports, indicating it was set up specifically for credential harvesting purposes. Google Safe Browsing has not yet blacklisted this domain, though it appears on multiple threat intelligence feeds including PhishTank and OpenPhish. The combination of Wix hosting, Let's Encrypt certificate, and Google Cloud infrastructure provides operational security that may delay traditional takedown efforts.  

As of today, live-endesktop.wixstudio.com remains active and accessible with an elevated risk rating. Security researchers should continue monitoring this domain for changes in infrastructure or payload delivery mechanisms. Organizations are advised to implement network-level blocking through DNS sinkholes or firewall rules targeting the known IP address. Users encountering this domain should report it to their security teams immediately and avoid any interaction with the site. The remaining risk remains elevated due to the domain's active status and sophisticated infrastructure choices that make rapid takedown challenging.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 34.144.206.118

## Detection Status
- VirusTotal: 11 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/fc2775a8-a605-42e0-913d-d47e2c96e1b1
- PhishDestroy: https://phishdestroy.io/domain/live-endesktop.wixstudio.com/
- LLM endpoint: https://phishdestroy.io/domain/live-endesktop.wixstudio.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/live-endesktop.wixstudio.com/
Last updated: 2026-03-23