appsdesktop-lives[.]wixstudio[.]com

A newly observed phishing domain, appsdesktop-lives.wixstudio.com, is actively luring visitors into surrendering sensitive credentials to a fraudulent login page disguised as a legitimate service. Security teams have classified the threat as a generic phishing attempt aimed at harvesting usernames and passwords under the guise of a desktop-applications portal, with the ultimate goal of account takeover and follow-on identity theft.

This domain was flagged by PhishDestroy on 5ee411 seed data. VirusTotal currently shows zero detections out of 95 engines, indicating it remains undetected by most antivirus platforms. The domain resolves to IP 34.144.206.118 and leverages a Let's Encrypt SSL certificate to appear legitimate. Infrastructure analysis indicates the site is hosted on Google Cloud, which is commonly abused by threat actors to evade IP-based blocking.

If you accessed this site and entered credentials, immediately change passwords on that account and enable multi-factor authentication. Scan local devices for malware and review account activity for signs of unauthorized access. Report any suspicious logins to your security team and consider revoking any tokens or sessions tied to the compromised credentials.