desktops-global-apps[.]wixstudio[.]com

Analysis of desktops-global-apps.wixstudio.com indicates the domain is actively resolving to the IPv4 address 162.159.143.12. The domain was registered through Wix.com Ltd., a widely used website‑builder platform, and the authoritative nameserver lookup returned NS_NOT_FOUND, suggesting that the domain’s DNS configuration is either incomplete or intentionally obscured. The site is presently listed on a single security blocklist and has been flagged by the PhishDestroy sinkhole, confirming that at least one defensive feed has identified it as malicious. VirusTotal reports that the domain has been examined by 91 antivirus and URL scanning engines; none of the engines raised a detection at the time of the scan.

The absence of detections does not constitute evidence of safety, as many phishing kits evade static analysis. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts is available in the current dataset. Given the limited telemetry, the primary confidence indicator is the association with PhishDestroy and the blocklist entry, both of which are commonly derived from observed phishing traffic. The infrastructure – a single IP address hosted on a cloud provider – is consistent with transient phishing deployments that leverage reputable hosting services to evade reputation‑based blocks.

Defenders should continue to monitor the domain for changes in DNS records, SSL configuration, or content signatures. Network‑level controls can be updated to block traffic to 162.159.143.12 when it is resolved to this hostname, and endpoint security solutions should be instructed to treat any URLs under the domain as malicious. Continuous re‑scanning with multi‑engine services is recommended to capture any future detections that may arise as the payload evolves.