geometrydashgolden[.]wixstudio[.]com

This domain, geometrydashgolden.wixstudio.com, is confirmed to pose a specific threat as a fake login page designed to steal user credentials and personal information. The site leverages Wix and React for its frontend and is hosted on Google Cloud, utilizing Google Cloud CDN and HTTP/3 for fast and efficient delivery. The domain has been taken offline, but its creation and brief operational period indicate a targeted phishing campaign.

Analysis indicates that 13 out of 95 security vendors on VirusTotal have flagged this domain as malicious, suggesting a high level of suspicion among the security community. The domain was registered through GoDaddy.com, LLC on May 30, 2026, and it currently resolves to the IP address 34.144.206.118. Moreover, the site appears on three known security blocklists, including PhishDestroy, PhishingArmy, and OISD, further corroborating its malicious intent. The use of a Let's Encrypt SSL certificate does not mitigate the risk, as it is common for phishing sites to employ legitimate encryption to gain user trust.

If users have visited geometrydashgolden.wixstudio.com, they should immediately check their accounts for any unauthorized activity, especially those associated with the impersonated brand. It is recommended to change passwords and enable two-factor authentication (2FA) on all relevant accounts. Users should also consider running a full system scan to ensure no malware was installed as a result of visiting the site. Reporting the incident to the impersonated brand's customer support can provide additional security measures and help in tracking the phishing activity.