our-desktop[.]wixstudio[.]com

The domain our-desktop.wixstudio.com is currently active and has been classified as a generic phishing site. DNS resolution points to the IPv4 address 162.159.143.12, an address that belongs to the Cloudflare edge network, indicating the use of a CDN or reverse‑proxy service. The domain is registered through Wix.com Ltd., a legitimate website‑builder platform, and the authoritative nameserver information could not be retrieved (NS_NOT_FOUND). Infrastructure analysis shows the domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing service has identified malicious activity associated with it.

VirusTotal records indicate that the URL was submitted to 95 scanning engines; none of the engines raised a detection at the time of the scan. While the absence of detections does not constitute evidence of benign behavior, it does suggest that the payload or hosting technique may be evading signature‑based detection. The limited visibility into page content, SSL certificate details, and HTTP response codes prevents a full behavioral assessment.

Consequently, the primary uncertainties are the exact phishing payload, the targeted brand, and whether the site leverages any additional infrastructure beyond the observed IP. Defenders should treat the domain as hostile: add the hostname to URL filtering and DNS blocklists, monitor outbound traffic for connections to 162.159.143.12, and consider isolating any internal accounts that may receive credential‑harvesting attempts. Continuous re‑evaluation is advised, as the risk level remains under investigation and the threat actor may modify the infrastructure at any time.