en-globalhomepages[.]wixstudio[.]com

PhishDestroy identifies en-globalhomepages.wixstudio.com as a generic phishing domain actively hosting fraudulent homepage impersonation content. The domain mimics legitimate homepage services to deceive users into entering credentials or downloading malicious files under the guise of accessing updated web content. No specific brand or drainer kit has been linked to this campaign in open-source intelligence, suggesting a broad, opportunistic phishing operation targeting generic homepage services rather than a targeted corporate or financial entity. The infrastructure appears to leverage Wix’s legitimate hosting platform to lend superficial credibility to the phishing pages. This domain resolves to IP address 34.144.206.118 and is secured with a Let’s Encrypt SSL certificate, which may lower user suspicion. As of current telemetry, VirusTotal reports 0 detections out of 95 engines, indicating it has not yet been widely flagged by antivirus or security tools. The domain was created recently and hosted on Wix’s platform, which is frequently abused by threat actors for low-cost phishing deployments due to its ease of use and free tier availability. Google Safe Browsing (GSB) and other public blocklists have not yet included this domain, and no historical blocklist entries were identified at the time of analysis. As of this report, the domain remains active and is currently under investigation by threat intelligence teams. No takedown or response action has been publicly confirmed. The risk level is classified as 'under_investigation' due to the absence of detections and limited historical data. Users are advised to avoid interacting with this domain and to report any encounters to their security teams or through threat intelligence platforms. The lack of early detection underscores the importance of real-time domain monitoring and user education on recognizing suspicious homepage links, even when served over HTTPS.