global-desktop-us[.]wixstudio[.]com

global-desktop-us.wixstudio.com has been flagged as a fake login phishing site under active investigation by PhishDestroy analysts. The domain mimics a generic desktop service but is engineered to harvest user credentials under the guise of a legitimate crypto platform. No evidence of a crypto drainer kit has been observed in the payload, but the site deploys a spoofed login interface to capture email-password combinations for subsequent account takeovers and credential stuffing attacks. The infrastructure relies on a WixStudio subdomain, which increases perceived legitimacy while obscuring true ownership. PhishDestroy’s forensic analysis reveals this domain resolves to IP 34.144.206.118 and is secured with a Let’s Encrypt SSL certificate. As of the latest scan, the domain shows 0 detections out of 95 engines on VirusTotal, indicating it remains undetected by mainstream security tools. The domain was registered via Wix’s infrastructure (Wix.com, Inc.) and shows no presence on Google Safe Browsing (GSB) or major blocklists, enabling prolonged exposure to potential victims. WHOIS data confirms the domain was created recently—within the last 30 days—further suggesting opportunistic deployment under a newly minted hosting provider. The site remains active and accessible as of threat assessment completion. PhishDestroy has flagged the domain for immediate blocking in its threat intelligence feed and issued takedown requests to Wix and hosting providers. However, due to the low detection rate and reliance on reputation laundering via Wix, the risk to users remains elevated until widespread blocking occurs. Users are strongly advised to validate any unsolicited login prompts, avoid entering credentials, and verify links using PhishDestroy’s real-time scanner to prevent credential compromise and potential financial loss. This domain should be treated as HIGH RISK until confirmed neutralized.