studio-desktopcdn[.]wixstudio[.]com

Analysis indicates that the domain studio-desktopcdn.wixstudio.com is currently active and has been classified as a generic phishing site. The domain was registered on December 17, 2016 through Wix Studio, and it continues to use the NS1.net name server cluster (dns1.p08.nsone.net through dns4.p08.nsone.net). VirusTotal scans have returned 10 positive detections out of 91 submitted security vendors, demonstrating that multiple antivirus and URL‑filtering products have identified malicious behavior associated with the host. The domain is listed on at least one external blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the consensus that it is being used for phishing campaigns.

No additional intelligence such as IP address, ASN, country of hosting, SSL certificate details, HTTP response codes, or page‑title metadata has been provided, leaving those aspects of the infrastructure unverified at this time. Given the existing evidence, defenders should treat any network traffic to or from studio-desktopcdn.wixstudio.com as high‑risk. Recommended mitigations include adding the domain to firewall deny lists, updating proxy and DNS filtering rules to block the host, and ensuring endpoint protection solutions that reference VirusTotal signatures are enabled.

Continuous monitoring for new indicators—such as changes to the name‑server set, emergence of additional blocklist listings, or fresh VirusTotal submissions—should be incorporated into threat‑intel feeds. Organizations that rely on Wix‑hosted services should verify that legitimate Wix Studio subdomains are not being conflated with this malicious host, and any internal references to the domain should be reviewed for potential compromise. Until further forensic data is released, the precautionary posture should remain elevated.