globlpage-desktop[.]wixstudio[.]com

This domain, globlpage-desktop.wixstudio.com, is identified as part of a credential theft operation designed to harvest user login credentials through deceptive login portals. Analysis indicates the infrastructure was crafted to mimic legitimate services, tricking visitors into entering usernames, passwords, or other sensitive authentication details. The domain leverages hosting environments commonly associated with legitimate platforms, increasing the likelihood of successful social engineering attacks against unsuspecting users. Evidence supporting this assessment includes detection by 10 out of 95 security vendors on VirusTotal, a trust score of 0/100, and presence on one security blocklist. The domain was registered through GoDaddy.com, LLC, with a creation date of April 28, 2026, suggesting either a typo-squatting attempt or a preemptive registration for malicious use. It resolves to the IP address 34.144.206.118, hosted on Google Cloud infrastructure, and employs technologies such as Wix, React, and Google Cloud CDN. The SSL certificate is issued by Let’s Encrypt, a common tactic to lend false legitimacy to phishing pages. Users who visited globlpage-desktop.wixstudio.com should assume their credentials may have been compromised. Immediate actions include changing passwords for any accounts accessed or entered on the site, enabling multi-factor authentication where available, and monitoring accounts for unauthorized activity. System scans using updated security tools are recommended to detect potential malware or follow-up threats. If financial or personally identifiable information was submitted, users should consider credit monitoring or identity protection services to mitigate further risk.