expert-desktop[.]wixstudio[.]com

PhishDestroy identifies expert-desktop.wixstudio.com as an active generic phishing domain, currently under investigation for credential harvesting campaigns. The domain is hosted on Wix Studio, a legitimate website builder, which may be abused to lend credibility to deception pages. No specific brand or drainer kit has been associated with this domain yet, but the threat type remains classified as generic due to the absence of targeted branding. The domain's infrastructure is leveraging a Wix subdomain (wixstudio.com), a common tactic used by threat actors to create plausible decoy pages while maintaining operational opacity.

This domain resolves to IP address 34.144.206.118 and is secured with a Let’s Encrypt SSL certificate. According to VirusTotal, the domain has not been flagged by any of the 95 detection engines as of the latest scan. The domain appears to be recently created, as no historical data is publicly available, and it remains unlisted on Google Safe Browsing (GSB) and most major blocklists. The registrar is Wix.com LLC, which complicates takedown efforts due to Wix’s legitimate infrastructure being exploited. As of this report, the domain remains active and accessible, indicating ongoing potential for user compromise.

expert-desktop.wixstudio.com is currently flagged with a status of 'active' and a risk level of 'under_investigation'. Security teams are advised to monitor this domain for changes in infrastructure or content. Users should avoid interacting with any links or forms on this site due to the confirmed phishing intent. While VirusTotal currently shows 4/95 detections, the absence of detections does not guarantee safety—this domain poses a real-time threat. Immediate defensive actions include blocking the domain at network gateways, flagging it in threat intelligence platforms, and informing users to exercise extreme caution when encountering links from unsolicited communications.