webstart-ledgrecd[.]wixstudio[.]com

The domain webstart-ledgrecd.wixstudio.com is hosted on Wix’s infrastructure and was registered through Wix.com Ltd. DNS resolution points to the IPv4 address 162.159.143.12, which is associated with Wix’s shared hosting pool. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy filtering service, indicating that at least one anti‑phishing consortium has identified it as malicious. A VirusTotal scan performed by 91 antivirus and URL‑reputation engines returned no detections, but the absence of a positive flag does not constitute a safety guarantee, especially given the domain’s presence on a blocklist.

Nameserver information could not be retrieved (NS_NOT_FOUND), and no page title or content analysis is currently available, leaving the exact phishing lure or targeted brand undefined. The limited data set suggests a generic phishing operation that leverages Wix’s free‑site platform to host deceptive pages, a pattern observed in other recent campaigns. Defenders should add the domain to outbound‑web filtering rules, monitor DNS queries for the IP 162.159.143.12, and enforce blocklist policies that include the listed entry.

Continuous re‑scanning with sandbox and URL‑reputation services is recommended to capture any future payloads or changes in page content. Organizations using Wix‑hosted services should be aware that the platform can be abused for phishing, and should consider tightening email and web gateway policies to detect and quarantine links that resolve to this address.