desktop-setupcdn[.]wixstudio[.]com

Analysis indicates that the domain desktop-setupcdn.wixstudio.com is currently flagged as an active generic phishing infrastructure with an elevated risk rating. The domain was registered through Wix Studio on December 17, 2016 and is served by the NSONE name server cluster (dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net). VirusTotal scans have recorded detections from six of ninety‑one security vendors, demonstrating that multiple independent scanners have identified malicious characteristics.

The domain is listed on at least one external security blocklist and has been explicitly blocked by the PhishDestroy platform, confirming that operational defenses have recognized it as a threat vector. No publicly available intelligence reports detail the underlying hosting IP address, TLS certificate status, HTTP response codes, or page title content for this host, leaving those aspects of the infrastructure uncertain. Consequently, defenders lack visibility into potential content delivery networks, geographic hosting location, or additional payload delivery mechanisms that might be associated with the domain.

Given the concrete evidence of vendor detections, blocklist inclusion, and active blocking by PhishDestroy, security teams should continue to deny any network traffic to desktop-setupcdn.wixstudio.com, incorporate the domain into local and cloud‑based URL filtering policies, and monitor for any related C2 communications that may emerge from the same name server group. Ongoing observation of VirusTotal submissions and threat‑intel feeds is advised to capture any future changes in detection rates or additional attribution details.