name-desktop[.]wixstudio[.]com

PhishDestroy identifies name-desktop.wixstudio.com as an active credential phishing domain under investigation, posing a medium risk due to its deceptive design targeting user login credentials. This WixStudio-hosted subdomain mimics legitimate desktop interfaces to harvest credentials, evading initial detection with 4/95 VirusTotal flaggings despite its active status.

Technical analysis reveals this domain resolves to IP 34.144.206.118, secured by a Let’s Encrypt SSL certificate for false legitimacy. As a WixStudio subdomain, it bypasses traditional phishing filters relying on known malicious domains, while its recent creation and lack of blocklist presence (4/95 VT detections) indicate a newly deployed attack vector. The absence of trust scores from major registrars further highlights its opacity, complicating takedown efforts.

To mitigate credential phishing risks, users should avoid interacting with unsolicited login prompts, verify domain authenticity via HTTPS certificates, and report suspicious links to security teams. Organizations should deploy browser-based phishing detection tools and educate users on recognizing Wix-hosted phishing pages. Network defenders are advised to block IP 34.144.206.118 and monitor for SSL certificate anomalies on subdomains like name-desktop.wixstudio.com.