ledrgstart[.]wixstudio[.]com

Analysis shows that ledrgstart.wixstudio.com was registered on June 08 2026 through the Wix Studio platform and resolves to the IPv4 address 34.144.206.118. The domain is served by four NSONE name servers (dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net). It appears on at least one public blocklist and is actively blocked by PhishDestroy, indicating that threat‑intelligence feeds have already flagged it as malicious.

VirusTotal records 12 detections out of 91 scanned scanners, confirming that multiple anti‑malware engines consider the domain suspicious. No public information on SSL certificates, HTTP status codes, page title, or hosted content is currently available, so the exact nature of the payload or phishing kit remains unverified. The recent registration date, shared‑hosting environment, and multi‑engine detections are consistent with the infrastructure used for generic phishing campaigns.

Defenders should add ledrgstart.wixstudio.com to network and email filtering policies, block the associated IP address (34.144.206.118) at perimeter devices, and monitor outbound traffic for connections to that host. Security teams encountering communications that reference this domain should treat them as malicious, advise users not to click any links, and consider sandboxing the URL once reachable to collect further technical indicators. Ongoing enrichment—such as retrieving the live page, inspecting TLS certificates, and correlating any observed payloads with known phishing kits—will improve situational awareness and support broader threat‑intel sharing.