en-us-desktop[.]wixstudio[.]com

Analysis of the domain en-us-desktop.wixstudio.com indicates it was flagged as a generic phishing threat targeting Wix Studio users. The domain, registered on March 22, 2026, through GoDaddy.com, LLC, resolved to the IP address 34.144.206.118, hosted on Google Cloud infrastructure in the United States. At the time of assessment, the domain returned an HTTP 404 status with the page title '404 Error: Page Not Found | Wix Studio,' suggesting either a defunct phishing page or a placeholder. The domain was listed on one security blocklist (PhishDestroy) and was flagged by 7 out of 94 security vendors on VirusTotal, though the specific detection rationale remains unverified.

Technical indicators include the use of Wix technologies, React, Google Cloud, and Google Cloud CDN, alongside HTTP/3 support. The SSL certificate was issued by Let's Encrypt, a common but not inherently malicious provider. Nameservers associated with the domain are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net. The domain has since been taken offline, limiting further analysis of its content or intended functionality.

Defenders should treat this domain as a confirmed phishing indicator, particularly in environments where Wix Studio credentials or related services are used. While the 404 status suggests the malicious page is no longer active, the domain's prior association with phishing warrants continued monitoring. No evidence of credential harvesting, malware delivery, or specific scam tactics (e.g., fake login portals) was available at the time of reporting. Organizations should review logs for connections to 34.144.206.118 or the domain itself and consider blocking both the domain and IP at perimeter defenses.