desktops-ledgrs[.]wixstudio[.]com

Analysis of desktops-ledgrs.wixstudio.com shows a persistent phishing infrastructure that has been active for several years. The domain was created on December 17, 2016 and is registered through Wix Studio, a platform often used for legitimate website hosting. Despite the legitimate registrar, the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, indicating that at least one reputable anti‑phishing service has observed malicious activity linked to this host.

The domain resolves to four NS1 nameservers (dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net), a configuration common to many disposable or fast‑flux hosting arrangements. VirusTotal has recorded 7 detections out of 91 scanned security vendors, a detection rate that exceeds the typical background noise for benign domains and suggests that multiple independent scanners have identified suspicious or malicious payloads associated with the site. No additional intelligence such as Safe Browsing status, OTX mentions, IP geolocation, SSL certificate details, HTTP response codes, trust scores, or page title information is available in the current data set, leaving those vectors unverified.

Given the confirmed blocklist entry, the multiple vendor detections, and the age of the domain, defenders should treat desktops-ledgrs.wixstudio.com as a high‑confidence phishing indicator. Recommended actions include adding the domain to enterprise DNS blocklists, updating firewall deny rules, monitoring any outbound connections to the associated nameservers, and alerting users about potential credential‑stealing attempts that may originate from this host. Continuous re‑evaluation is advised as further threat‑intel sources may surface additional attributes such as payload samples or victim reports.