desktopengldger[.]wixstudio[.]com

PhishDestroy identifies desktopengldger.wixstudio.com as an active credential theft phishing domain under investigation for mimicking legitimate services to harvest user credentials. The site poses as a desktop support portal to trick victims into entering login details, which are then exfiltrated to attacker-controlled servers. Security tools have not yet flagged this domain due to its recent deployment and low detection rates. This domain resolves to IP 34.144.206.118 and is hosted on WixStudio infrastructure, carrying a valid Let’s Encrypt SSL certificate. It shows 4/95 detections on VirusTotal as of the latest scan, indicating minimal early-stage detection coverage. Hosted on a Google Cloud IP range (34.144.206.0/24), the domain employs bulletproof hosting tactics to delay blacklisting. It was created recently and remains unlisted on major blocklists like Google Safe Browsing, PhishTank, and OpenPhish, leaving users vulnerable. Trust scores from security vendors are not yet available, suggesting it has not undergone extensive reputation analysis. To protect against credential theft via this domain, users must avoid entering any login credentials or sensitive data into forms hosted on desktopengldger.wixstudio.com. Verify the URL structure and domain spelling carefully—legitimate services rarely use subdomains under wixstudio.com for official support portals. Enable multi-factor authentication (MFA) on all accounts, use password managers that flag suspicious domains, and block the IP 34.144.206.118 at the network level if possible. Report this site to your browser’s built-in phishing protection and share its details with security communities to accelerate takedown. Organizations should monitor for internal access attempts to this domain in proxy logs or DNS query histories.