purchase-desktop[.]wixstudio[.]com

PhishDestroy identifies purchase-desktop.wixstudio.com as an active banking phishing domain masquerading as a legitimate vendor portal. Current evidence shows the threat actors are leveraging WixStudio’s hosting platform to deploy a fraudulent purchasing interface designed to harvest payment credentials and other sensitive banking information from unsuspecting users. The site remains accessible as of the latest scan and continues to pose a credible risk to consumers engaging in what they believe is a secure transaction. This domain was flagged by zero of 95 VirusTotal vendors as of the last scan, indicating it has evaded detection from most antivirus engines. It is hosted on a Google Cloud IP (34.144.206.118) and secured with a Let’s Encrypt SSL certificate, adding a false sense of legitimacy. While the domain is registered under Wix’s Wix.com Inc. platform, the subdomain purchase-desktop.wixstudio.com is being abused to host a fake vendor page. The absence of detections, combined with the use of a legitimate hosting provider, suggests this campaign is relatively new or employing sophisticated evasion techniques. The domain remains under active investigation with no confirmed takedown at this time. Users are strongly advised to avoid interacting with this domain or any links related to purchase-desktop.wixstudio.com. If you have recently entered credentials or payment details on this site, immediately change your banking passwords, enable two-factor authentication, and report the incident to your financial institution. Consider using browser-based phishing filters or reputable security tools to block access to known malicious domains. Always verify the authenticity of vendor portals by checking URLs for misspellings or unusual subdomains and cross-referencing with official company websites. Monitor your financial accounts for unauthorized transactions and report any suspicious activity promptly.