desktop-host[.]wixstudio[.]com

PhishDestroy identifies desktop-host.wixstudio.com as a generic phishing domain actively mimicking legitimate cloud hosting services to harvest user credentials. The domain leverages WixStudio’s branding to appear trustworthy, deploying a phishing kit designed to trick users into entering sensitive information under the guise of cloud storage or hosting. This tactic capitalizes on the trust associated with well-known platforms to increase the likelihood of successful compromises.

Technical analysis of desktop-host.wixstudio.com reveals concerning indicators: the domain resolves to IP 34.144.206.118 and operates with a valid Let’s Encrypt SSL certificate, which may mislead users into believing the site is secure. VirusTotal currently shows 4/95 detections, indicating that mainstream antivirus engines have not yet flagged this domain. The domain is registered under Wix’s infrastructure (WixStudio), suggesting abuse of legitimate services to host malicious content. Creation date and Google Safe Browsing (GSB) status remain unverified in public databases, and blocklist counts are not yet available, signifying a rapidly evolving threat that requires immediate attention.

This domain remains active and is under investigation, with a risk level classified as under_investigation. PhishDestroy recommends immediate avoidance of desktop-host.wixstudio.com and advises users who may have interacted with the site to change passwords and enable multi-factor authentication on all accounts. Security teams should monitor IP 34.144.206.118 and block the domain at the network level. The remaining risk is high due to the domain’s abuse of legitimate infrastructure and low detection rates, necessitating swift action to prevent further exploitation.