simple-globaldesktop[.]wixstudio[.]com

PhishDestroy identifies simple-globaldesktop.wixstudio.com as an active credential theft domain posing as a legitimate service. This WixStudio-hosted subdomain is designed to deceive users into submitting sensitive login credentials under false pretenses. The campaign leverages a generic but plausible domain name to mimic a global desktop service, increasing the likelihood of successful credential harvesting.

This domain was flagged with 3/95 detections on VirusTotal as of the latest scan, indicating it remains undetected by most antivirus engines. It resolves to IP address 34.144.206.118 and uses a valid Let's Encrypt SSL certificate to enhance its appearance of legitimacy. The subdomain is hosted on WixStudio’s platform, which may complicate immediate takedown due to shared infrastructure. No known blocklist entries or low trust scores have been recorded yet, but the absence of detections suggests early-stage deployment or evasion tactics.

Users should avoid entering any login credentials or personal information on this domain. Verify the legitimacy of web services by checking official URLs, confirming SSL certificates, and cross-referencing with known brand domains. Organizations are advised to monitor for unusual authentication attempts linked to this IP or domain. If compromised, immediately rotate credentials and enable multi-factor authentication (MFA) on all related accounts. Report this domain to your email provider, browser security teams, and threat intelligence platforms to aid in detection expansion.