global-started[.]wixstudio[.]com

PhishDestroy identifies global-started.wixstudio.com as an active phishing domain posing as a startup-focused landing page to harvest credentials and sensitive data. This domain employs a deceptive WixStudio subdomain to mimic legitimate startup resources, tricking users into entering login details or payment information under the guise of 'global business opportunities.' The threat actor leverages HTTPS via a Let's Encrypt certificate to appear trustworthy, while the domain's recent creation and blocklist presence indicate a short-lived but high-risk campaign targeting unsuspecting entrepreneurs. This domain was flagged by 5 out of 95 VirusTotal security vendors, indicating elevated detection but not universal consensus. It has been added to 2 prominent blocklists, including PhishingArmy and OISD, and resolves to IP 34.144.206.118, hosted on Google Cloud infrastructure. While the exact creation date is undisclosed, the combination of low VirusTotal coverage, multiple blocklist inclusions, and the use of a free SSL certificate suggests a hastily deployed phishing operation likely operating within days or weeks of discovery. Users who visited global-started.wixstudio.com should immediately check their accounts for unauthorized access, especially if credentials were entered. Disconnect from the site, clear browser cache/cookies, and run a malware scan. Report the domain to your IT team or cybersecurity provider and monitor financial accounts for suspicious transactions. Avoid interacting with any further communications from this domain, as it is likely part of a broader credential phishing or malware distribution campaign targeting startup enthusiasts.