deskop-learn-en[.]wixstudio[.]com

Analysis of deskop-learn-en.wixstudio.com, a domain registered on April 8, 2026, reveals indicators consistent with phishing infrastructure targeting corporate training or e-learning credentials. The domain resolves to 34.144.206.118, a Google Cloud IP address located in the United States, and is currently offline with an HTTP 404 status. Infrastructure analysis shows it uses four nameservers under nsone.net (dns1.p08.nsone.net through dns4.p08.nsone.net) and was registered via GoDaddy.com, LLC. A Let's Encrypt SSL certificate is present, which is common in both legitimate and malicious sites. As of July 25, 2026, the domain appears on one security blocklist (PhishDestroy), and three of 94 security vendors on VirusTotal flagged it as malicious.

No additional context is available regarding the specific phishing kit, targeted brand, or lure content, as the site is offline and no page title or scam type was provided. The domain name suggests an attempt to mimic a corporate learning or desktop training portal, potentially using 'deskop' as a typo-squatting variant of 'desktop' to deceive users. Defenders should treat this domain as elevated risk based on detection volume and blocklist presence.

No evidence confirms active compromise or victim impact. Organizations are advised to monitor logs for connections to 34.144.206.118 or the domain, and consider sinkholing or alerting on related indicators. Further analysis is required to determine the exact nature of the phishing content once the site becomes accessible.