begin-ledgeaap[.]wixstudio[.]com

Analysis of begin-ledgeaap.wixstudio.com shows that the domain is currently active and has been blocked by the PhishDestroy sinkhole. The domain resolves to the IPv4 address 34.144.206.118, which is hosted on infrastructure operated by Wix.com Ltd., the registrar listed for the domain. No authoritative nameserver records were returned during DNS interrogation, indicating that the domain may be using Wix’s default DNS configuration or that query responses are being suppressed. The domain appears on a single public blocklist, confirming that at least one external threat‑intelligence source has identified it as malicious. A VirusTotal scan was performed by 95 antivirus engines, none of which reported a detection; the absence of detections does not constitute a safety assurance. The available data does not reveal the specific phishing lure, targeted brand, or content served by the site, leaving the exact attack vector uncertain. Defenders should continue to block the domain at perimeter controls, monitor outbound DNS traffic for queries to the host, and consider adding the IP address 34.144.206.118 to reputation‑based deny lists. Ongoing observation of the domain’s activity and periodic re‑scanning with malware sandboxes are recommended to capture any future changes in payload or campaign tactics.