eng-desktops[.]wixstudio[.]com

PhishDestroy identifies eng-desktops.wixstudio.com as a credential phishing domain under active exploitation. This host is masquerading as an enterprise desktop login interface to harvest corporate credentials, posing a direct risk to organizations with remote workforce policies. The domain is currently live and engaged in malicious operations, with no detections recorded across 95 VirusTotal scanners at the time of analysis.

This domain, hosted on Wix’s platform, is associated with IP address 34.144.206.118 and secured via a Let’s Encrypt SSL certificate. It currently remains unblocked by reputable threat intelligence feeds, including VirusTotal’s composite analysis, and shows no presence in public blocklists or reputation databases. The domain is still active, with no takedown or remediation efforts observed.

Mitigation for this threat involves immediate network-level blocking of eng-desktops.wixstudio.com and 34.144.206.118 via DNS and firewall rules. Users who may have entered credentials should reset passwords immediately and enable multi-factor authentication where available. Security teams should monitor for anomalous login attempts from this domain and audit related access logs for signs of compromise.