Skip to security report
Checked Aug 9, 2026 Ref FE528389

MALICIOUS — HIGH

appstartcdn-ledgeapp[.]wixstudio[.]com

Analysis of appstartcdn-ledgeapp.wixstudio.com shows that the host is currently active and resolves to the IP address 162.159.143.12.

68/100 evidence score · High
VirusTotal
0/91
Blocklists
No stored match
Availability
Content unavailable · HTTP 404
Report / Add Evidence Appeal this listing
2026-07-23 12:38 UTCContent unavailable · HTTP 404
View full size Wayback Download

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
This domain has been flagged as malicious
PhishDestroy forensic analysis flagged this domain. Exercise extreme caution — do not enter credentials or personal information.
Jump to section

Evidence Analysis

Stored AI analysis · Jul 23, 2026

Ref FE528389

Analysis of appstartcdn-ledgeapp.wixstudio.com shows that the host is currently active and resolves to the IP address 162.159.143.12. The domain was registered through Wix.com Ltd., a popular website‑builder platform, and its nameserver information could not be retrieved (NS_NOT_FOUND). The domain appears on one external blocklist and has been flagged by the PhishDestroy detection engine as a generic phishing host.

No additional evidence such as SSL certificate details, HTTP response codes, page titles, or Safe Browsing verdicts is available in the current dataset, and the site has not been indexed by other major scanning services. Because the only observable indicators are the registration record, the hosting IP, and the single blocklist entry, the confidence in the phishing classification stems primarily from the PhishDestroy tag and the presence on a known blocklist. Defenders should treat the address as malicious, add 162.159.143.12 to network‑level deny lists, and block any DNS queries for appstartcdn-ledgeapp.wixstudio.com.

Continuous monitoring of the IP and periodic re‑evaluation of blocklist status are recommended, as the domain may evolve or be repurposed. Organizations using Wix‑based services should verify that internal credentials are not being submitted to any unexpected Wix subdomains, and users should be warned against following unsolicited links that resolve to this host. The limited public visibility means that further investigation, such as retrieving the landing page content or performing a manual TLS handshake, would be required to confirm the exact phishing payload and any potential credential‑harvesting forms.

VirusTotal
VirusTotal
0 det.
URLScan
URLScan
Report ↗
TLS Certificate
Let's Encrypt
Observed status
Content unavailable 404
PhishDestroy
DestroyList
Listed
Data coverage12 recorded checks
VirusTotal checked — no detections recorded URLQuery not checked PhishStats not checked OTX no community references CF Radar scan completed URLScan capture stored report URLScan verdict malicious DNS blocks not checked TLS valid certificate, 60d WHOIS not parsed Screenshot 2 captures · 2 sources Redirect chain not probed

Threat Response Pipeline

Discovery
Checks
Reports
Availability
13/14

Public Blocklist Status

Stored Capture

Primary capture 1 / 2
View Full Size Wayback Download
Page Title
404 Error: Page Not Found | Wix Studio
TLS Certificate
Valid transport encryption · Issued by Let's Encrypt · valid for 60 days

Domain Intelligence

Domain
URLScan Verdict Malicious score 100 Phishing brand: Ledger report ↗
Server / ASN cloudflare · AS13335 CLOUDFLARENET - Cloudflare, Inc., US
IP Context Cloudflare shared edge origin IP hidden Edge-IP reputation is not attributed to this domain.
Registrar (base domain) Wix.com
Abuse contactabuse@wix.com
ICANN RegistryOfficial ICANN accredited-registrars →
WHOIS LookupICANN RDAP for wixstudio.com →
IP Address 162.159.143.12 CDN
GeoUS San Francisco, US
NetworkAS13335 · Cloudflare, Inc.
Reverse IPviewdns.info → rapiddns.io →
The origin IP is hidden behind a CDN proxy. Reverse-IP results for the edge address contain unrelated tenants; finding the origin requires passive DNS or certificate-transparency data.
HTTP Status404 Not Found
Time to First Unavailability 9h
What we count Elapsed time from the first stored abuse report to the first observation that the content was unavailable. This does not establish the cause.
What each report contains Stored outgoing-report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Technical detailsDNS, SSL SANs, timestamps
First DetectedJul 23, 2026
DOM Analysisanalyzed Jul 23, 2026score 68/100
IoC Extractionscanned Jul 29, 20260 wallet · 0 Telegram IoCs
Submitted URLhttps://appstartcdn-ledgeapp.wixstudio.com/us-en
TLS Fingerprint
TLS Observationvalid from Jun 24, 2026scanned Jul 23, 2026
TLS SAN Domainswixstudio.com
Favicon Hash
ICANN OVERSIGHT Registration: wixstudio.com

Accreditation and RAA context

Registrar accreditation and DNS abuse obligations

For the registrable domain wixstudio.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accreditation is a contract, not a safety seal. Verify ICANN fees Read RAA §3.18 PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Accountability draft Nothing is sent automatically.
Technologies · 5 identified
Wix
CMS Blogs

Wix provides cloud-based web development services, allowing users to create HTML5 websites and mobile sites.

www.wix.com 100% confidence
React
JavaScript frameworks

React is an open-source JavaScript library for building user interfaces or UI components.

reactjs.org 100% confidence
Google Cloud
IaaS

Google Cloud is a suite of cloud computing services.

cloud.google.com 100% confidence
Google Cloud CDN
CDN

Cloud CDN uses Google's global edge network to serve content closer to users.

cloud.google.com 100% confidence
HTTP/3
Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

httpwg.org 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

0 / 91 security vendors flagged this domain
View on VT
Last analyzed
No VirusTotal engine marked the domain malicious in the stored analysis.
Site Performance Analysis

Google PageSpeed Insights — mobile performance audit of appstartcdn-ledgeapp.wixstudio.com · checked Jul 23, 2026

84
Needs Work
Performance
FCP
2.42s
First Contentful Paint
LCP
4.05s
Largest Contentful Paint
CLS
0.002
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
2.42s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Site Configuration Analysis
Stored observations are retained with their original collection time.
robots.txt Present · HTTP 200
/_partials* /pro-gallery-webapp/v1/galleries/*
Observed 2026-08-09 06:09:02 UTC · site-file probe
Evidence & External ReportsIndependent lookups and source reports
Security Analysis
URLScan Malicious VirusTotal ChainPatrol URLQuery Open lookup SSL Labs Stored TLS valid CF Radar Open report WOT ScamAdviser Blacklist Checker URLVoid Sucuri SiteCheck MDN Observatory
OSINT & Intelligence
Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Hudson Rock Sign-in search IntelX crt.sh Certs WHOIS Wayback
DNS & Network
nslookup.io DNS bgp.tools ASN/Route
SEO & Domain
SpyFu Moz DA/PA Ahrefs Backlinks Deep Analysis
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
PhishDestroy listing review Not a law-enforcement report
Domain Appeal
Request a review if you own this domain and believe the listing is incorrect
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself
Embed This ReportRead-only HTML widget
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html 
<iframe
  src="https://phishdestroy.io/embed/domain/appstartcdn-ledgeapp.wixstudio.com"
  title="PhishDestroy threat report for appstartcdn-ledgeapp.wixstudio.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

A Very Sincere Thank-You Note

Satirical draft generator

Recipient
Fee context

Satirical draft. Fee figures are estimates; exact attribution to this domain is not claimed.