comstart-ledzrcdn[.]wixstudio[.]com

Analysis of comstart-ledzrcdn.wixstudio.com as of July 23, 2026, indicates this domain is an active phishing endpoint hosted on Wix Studio infrastructure. The domain was registered through Wix.com Ltd. and currently resolves to IP address 162.159.143.12, which is part of Cloudflare's network. No nameserver records were detected at the time of investigation, an atypical configuration that may indicate recent provisioning or deliberate obfuscation. The domain appears on one security blocklist and is actively blocked by PhishDestroy, suggesting prior detection of malicious activity. Notably, the domain has been scanned by 91 vendors on VirusTotal, with no current detections reported.

While this absence of flags does not confirm safety, it may reflect evasion techniques or recent deployment. The domain remains operational, with no evidence of takedown or suspension. Infrastructure analysis reveals the site is hosted on Wix's platform, which is frequently abused for phishing due to its ease of deployment and free SSL certificates. No specific brand impersonation, phishing kit, or scam type has been confirmed in available data. The exact content and target of the phishing campaign are not yet analysed, and no HTTP response codes or page titles are available for further classification.

Defenders should treat this domain as high-risk until further analysis is completed. Recommended actions include blocking the domain at the DNS or proxy level, monitoring for connections to 162.159.143.12, and investigating any internal access attempts. Security teams should also review Wix-hosted subdomains for similar patterns, as threat actors often reuse platform infrastructure for phishing campaigns. If additional indicators emerge, such as brand impersonation or phishing kit signatures, the risk classification may be updated.