ledzersso-startdapps[.]wixstudio[.]com

Analysis of ledzersso-startdapps.wixstudio.com indicates an active phishing domain targeting user credentials. The domain was registered on June 8, 2026, through Wix Studio, a platform that allows rapid deployment of web pages, which is frequently exploited for phishing campaigns due to its ease of use and built-in SSL certificates. As of July 29, 2026, the domain is flagged by 14 of 91 security vendors on VirusTotal, suggesting detection by multiple threat intelligence sources. It also appears on at least one security blocklist, further corroborating its malicious classification.

The domain resolves to nameservers dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, which are legitimate but commonly used by threat actors to host phishing infrastructure due to their reliability and lack of restrictive abuse policies. No specific brand impersonation or phishing kit details are currently available in the observable evidence. The domain name itself contains elements such as 'ledzersso' and 'startdapps,' which may suggest an attempt to mimic a single sign-on (SSO) or decentralized application (dApp) portal, though this remains speculative without further content analysis. The exact nature of the phishing lure—whether it targets corporate credentials, cryptocurrency wallets, or other sensitive data—is not confirmed.

Defenders should treat this domain as elevated risk and block it at the network level. Organizations using Wix Studio for legitimate purposes should monitor for unauthorized subdomains and enforce strict access controls to prevent abuse. Additional investigation into the hosted content is recommended to determine the precise phishing mechanism and targeted entities.