desktop-setupen[.]wixstudio[.]com

Analysis of desktop-setupen.wixstudio.com shows that the domain is currently active and has been flagged by multiple defensive sources. The site is listed on one public security blocklist and was actively blocked by the PhishDestroy service, indicating that it has been observed delivering phishing content. DNS resolution points to the IP address 162.159.143.12, which is hosted by the Wix.com Ltd. infrastructure; the registrar record confirms registration through Wix.com Ltd. No authoritative nameservers were retrieved (NS_NOT_FOUND), limiting the ability to assess delegation health.

VirusTotal reports that the domain was scanned by 91 antivirus and URL‑reputation engines, none of which returned a detection at the time of scanning; this lack of detection does not constitute evidence of benign behavior. Standard safety‑check mechanisms such as Google Safe Browsing, Open Threat Exchange, SSL certificate details, HTTP response codes, trust‑score metrics, and page‑title analysis are not available in the current dataset, leaving those vectors unverified. Given the confirmed blocklist presence, active status, and association with a known phishing‑blocking service, defensive teams should treat the domain as malicious.

Recommended actions include adding the domain to outbound filtering rules, monitoring DNS queries for the resolved IP, and, where possible, employing sinkholing or sinkhole redirects to disrupt any further phishing campaigns. Continuous re‑evaluation is advised as additional intelligence, such as page content or SSL metadata, becomes available.