ledagrhub-starten[.]wixstudio[.]com

As of July 23, 2026, ledagrhub-starten.wixstudio.com is classified as a generic phishing infrastructure and remains active. The domain was registered through Wix.com Ltd., a widely used website‑building platform, and currently resolves to the IP address 162.159.143.12. An analysis of public threat intel indicates that the domain appears on a single security blocklist and is explicitly blocked by PhishDestroy, confirming that at least one anti‑phishing service has identified malicious use.

The site was submitted to VirusTotal where 91 antivirus and URL‑reputation vendors scanned the content; none reported a detection. While the absence of detections does not constitute proof of legitimacy, it suggests that the payload or landing page may employ techniques that evade static signature‑based detection. No nameserver information is available (NS_NOT_FOUND), limiting insight into the DNS hosting configuration.

No additional data such as SSL certificate details, HTTP response codes, page title, or Safe Browsing status have been disclosed, leaving the exact content and credential‑harvesting mechanisms unverified. Defenders should consider adding the domain to outbound filtering rules, monitor DNS queries for the associated IP, and correlate any authentication attempts originating from the IP with user activity. Continuous re‑evaluation is advised, as further analysis of the landing page or subsequent traffic could reveal additional indicators of compromise.