usadesktop[.]wixstudio[.]com

Analysis as of August 05, 2026 indicates that the domain usadesktop.wixstudio.com is actively being used in a generic phishing campaign. The domain resolves to the IP address 162.159.143.12, which belongs to the infrastructure operated by Cloudflare and is commonly used by sites hosted on the Wix platform. Registration details show that the domain was created through Wix.com Ltd., a legitimate website‑builder service, and no separate nameserver records were returned, suggesting reliance on Wix’s default DNS configuration.

The domain has been reported to and blocked by the PhishDestroy service and appears on one external security blocklist, confirming that at least one independent threat‑intelligence source has identified malicious activity associated with it. VirusTotal records indicate that the domain was scanned by 91 antivirus or URL‑reputation vendors; none of the vendors raised a detection at the time of scanning, but this absence does not constitute evidence of safety, as many phishing pages evade automated signatures. No public SSL certificate information, HTTP response codes, or page‑title metadata have been disclosed, leaving the exact content and visual impersonation tactics unknown.

Consequently, defenders should treat the domain as high‑risk until further content analysis is performed. Recommended mitigations include adding the domain to network‑level deny lists, configuring web‑proxy filters to block HTTP requests to the host, and monitoring DNS queries for the associated IP address. Continuous re‑evaluation is advised, as the hosting provider’s shared infrastructure may host both legitimate Wix sites and malicious pages, and the threat actor could later modify the payload without changing the underlying domain.