us-core-desktop[.]wixstudio[.]com

Domain us-core-desktop.wixstudio.com is currently active and has been identified as a credential theft phishing domain. Security analysts have flagged this domain as part of an ongoing investigation into phishing campaigns targeting user login credentials. The threat involves impersonation of legitimate services to deceive users into submitting their credentials via fraudulent forms. The domain remains unresolved in most detection engines, indicating a high potential for successful deception. This domain resolves to IP address 34.144.206.118 and is hosted within WixStudio, utilizing a Let’s Encrypt SSL certificate. According to VirusTotal, the domain has not been flagged by any of 95 security vendors as of the latest scan, suggesting that traditional detection mechanisms have yet to identify the threat. The domain is associated with a newly registered host under Wix’s infrastructure, with minimal historical data available. Trust scores and domain age metrics are currently under review, but the absence of detections raises concerns about its rapid deployment in active phishing campaigns. Given its active status and lack of blocklisting, this domain poses a credible risk to users who may interact with it. As this threat remains under investigation, users are strongly advised to avoid interacting with us-core-desktop.wixstudio.com or submitting any credentials through linked forms. Security teams should monitor this domain for updates and consider proactively blocking the associated IP address 34.144.206.118 at the network perimeter. Continuous monitoring of VirusTotal and threat intelligence feeds is recommended to track changes in detection status. Users who may have already entered sensitive information should immediately reset passwords and enable multi-factor authentication where applicable.