project-desktop[.]wixstudio[.]com

PhishDestroy identifies project-desktop.wixstudio.com as a generic phishing domain impersonating a desktop application installer to harvest user credentials or deliver malware. The site leverages WixStudio’s legitimate hosting infrastructure to lend false credibility, a common tactic in decoy phishing campaigns targeting software piracy. While no drainer kit has been publicly confirmed, the domain’s structure and purpose align with credential theft schemes often deployed through fake software repositories.

This domain resolves to IP 34.144.206.118 and is hosted on Wix’s platform via wixstudio.com. File analysis of 95 security engines via VirusTotal returned 0 detections (5/95), indicating it remains under the radar of mainstream detection systems as of latest scans. The domain utilizes a valid Let’s Encrypt SSL certificate, which enhances phishing believability by displaying HTTPS. Registrar and creation date details are not publicly available at this time. Google Safe Browsing (GSB) status is not flagged, and no public blocklist entries have been recorded. This suggests a recently activated or organically grown threat with low prior exposure.

The domain is currently ACTIVE and under investigation by PhishDestroy. Immediate actions include DNS blacklisting and browser/endpoint rule deployment to block access. Users are strongly advised to avoid visiting project-desktop.wixstudio.com and to use reputable software sources. Remaining risk is assessed as HIGH due to active hosting, low detection rates, and absence from blocklists. Continuous monitoring is required to update threat intelligence and protect potential victims from credential theft or malware infection.