officials-desktop[.]wixstudio[.]com

This domain, officials-desktop.wixstudio.com, is identified as a credential phishing resource targeting users through deceptive login or authentication interfaces. Analysis indicates no direct association with a specific brand or drainer kit, though the infrastructure and hosting pattern align with common phishing campaigns leveraging legitimate cloud services. The domain was hosted on Wix Studio, a platform often exploited for its ease of deployment and SSL support, making malicious sites appear legitimate to unsuspecting victims.

Technical indicators confirm the domain was flagged by 15 out of 95 security vendors on VirusTotal, indicating moderate to high confidence in its malicious nature. Registered through GoDaddy.com, LLC, the domain was created on April 26, 2026, and resolved to the IP address 34.144.206.118, part of Google Cloud infrastructure. It appears on three security blocklists: PhishDestroy, PhishingArmy, and OISD. The SSL certificate was issued by Let's Encrypt, a common choice for phishing sites due to its free and automated issuance process. Technologies detected include Wix, React, Google Cloud CDN, and HTTP/3, suggesting a modern, cloud-based phishing infrastructure designed to evade detection and improve scalability.

As of the latest assessment, the domain is offline, returning a 404 error page titled '404 Error: Page Not Found | Wix Studio.' While the immediate threat has been mitigated, the infrastructure remains a potential risk. Historical DNS records and SSL certificates may still be leveraged for future campaigns, and similar domains could emerge using the same registrar or hosting provider. Organizations are advised to block the domain and associated IP at the network level, monitor for related subdomains or IPs, and educate users on recognizing phishing attempts that mimic legitimate cloud services. The Gridinsoft trust score of 0/100 further validates the domain's malicious classification and underscores the need for continued vigilance.