ldgre-homepage[.]wixstudio[.]com

PhishDestroy identifies an active phishing campaign hosted at ldgre-homepage.wixstudio.com, a Wix-based page impersonating a legitimate login portal. The domain resolves to IP 34.144.206.118 and utilizes a valid Let's Encrypt SSL certificate to appear trustworthy. Current intelligence shows this threat remains undetected by security engines, with VirusTotal reporting 0 detections out of 95 scanners as of the latest check. This domain poses an immediate credential theft risk by tricking users into submitting sensitive login details under false pretenses. Technical indicators include a recent WixStudio subdomain deployment, a cloud-hosted IP address (34.144.206.118) associated with dynamic infrastructure, and a legitimate SSL certificate leveraged to bypass browser-based warnings. The absence of detections suggests either a newly deployed campaign or the use of evasion techniques to avoid signature-based detection. Without additional blocklist entries or behavioral anomalies flagged, this threat remains highly effective against unsuspecting users. Users who have accessed this domain should immediately cease any interaction and audit accounts for unauthorized access. If credentials were entered, change passwords immediately and enable multi-factor authentication where available. Report the domain to security teams and avoid future visits. Organizations should consider domain blocking and SSL inspection to prevent similar campaigns from compromising internal systems. This investigation remains active under seed 25a9b1.