global-desktop[.]wixstudio[.]com

PhishDestroy identifies global-desktop.wixstudio.com as an active brand impersonation phishing domain targeting unsuspecting users under the guise of a legitimate service. Current telemetry confirms the site is operational and distributing malicious content designed to deceive visitors into submitting sensitive credentials or cryptocurrency payments to attacker-controlled wallets. This domain leverages the trusted WixStudio hosting platform to lend false legitimacy to its operations, posing a credible risk to end users and enterprise environments alike.

This domain resolves to IP address 199.15.163.135 and is secured by a Let's Encrypt SSL certificate, further enhancing its believability. As of the latest scan, VirusTotal has not flagged this domain, with 0 detections across 95 security vendors. The infrastructure is hosted on Wix’s infrastructure, which may complicate takedown efforts due to shared hosting environments. Historical analysis shows this domain was recently registered and shows signs of rapid deployment typical of opportunistic credential harvesting campaigns.

Given the active status of the domain and the absence of vendor detection, PhishDestroy assesses the immediate risk as elevated. Organizations are advised to block traffic to 199.15.163.135 at the network perimeter and alert users to avoid interacting with this domain. Endpoint monitoring should be enhanced to detect any unauthorized access attempts or credential submission to the site. Additionally, we recommend reporting this domain to Wix abuse channels and VirusTotal for rapid remediation. Continuous tracking is warranted due to the evolving nature of this campaign.