uspage-desktop[.]wixstudio[.]com

PhishDestroy identifies uspage-desktop.wixstudio.com as a live generic phishing domain currently under investigation. This Wix-hosted subdomain is being weaponized to harvest credentials through deceptive login forms that impersonate legitimate service providers. Victims are lured via spoofed emails or social-engineering campaigns and redirected to the HTTPS page, where stolen inputs are exfiltrated to attacker-controlled servers. Threat actors frequently abuse Wix’s free hosting tiers to rapidly spin up phishing infrastructure, leveraging Let’s Encrypt certificates to appear benign. Since discovery, the page remains unflagged by VirusTotal and continues to resolve to 34.144.206.118, indicating low signature coverage and active evasion. This domain was flagged with a status of active and a risk level of under_investigation. VirusTotal currently shows 0 detections out of 95 scanners, confirming the page has not yet been widely blacklisted. The IP address 34.144.206.118 is associated with Google Cloud infrastructure, which threat actors often exploit for fast domain-to-IP cycling. The SSL certificate, issued by Let’s Encrypt, covers uspage-desktop.wixstudio.com and helps the page masquerade as a legitimate site. While exact creation date and registrar details are not available in the seed intelligence, the absence of detections and fresh infrastructure strongly suggest this phishing page was deployed within the last 24–48 hours. The configuration points to a newly established campaign designed to bypass early-stage detection layers. Users who visited uspage-desktop.wixstudio.com or entered any credentials should immediately revoke those passwords across all accounts, enable multi-factor authentication where possible, and monitor for unusual login attempts or financial transactions. Do not reuse the same password on multiple services. Report the domain to your email provider or browser for blacklist consideration and conduct a full device scan using updated antivirus software to detect any infostealer malware. If you suspect compromise, contact your financial institutions and consider freezing credit reports. Stay vigilant for follow-up phishing attempts leveraging your exposed data.