my-ledgruscdn[.]wixstudio[.]com

The domain my-ledgruscdn.wixstudio.com is flagged as a generic phishing infrastructure and remains active as of the report date, July 25, 2026. Registration data shows the domain was created through Wix.com Ltd., a widely used website‑builder service, which suggests the attacker leveraged a legitimate registrar to obtain the domain. The domain resolves to the IP address 162.159.143.12, an address associated with shared hosting environments often used by malicious actors to blend in with benign traffic. Nameserver information is unavailable (NS_NOT_FOUND), limiting visibility into DNS delegation and potential sub‑domain proliferation.

The domain has been listed on a single security blocklist and is actively blocked by the PhishDestroy detection vendor, indicating at least one security organization has observed malicious use. No additional intelligence such as page titles, SSL certificates, Safe Browsing verdicts, or OTX references is currently available, leaving the exact content and phishing lure unverified. Defenders should prioritize adding my-ledgruscdn.wixstudio.com to DNS blocklists and firewall deny lists to prevent internal users from resolving the domain.

Monitoring outbound connections to 162.159.143.12 can help identify compromised hosts that may be contacting the phishing server. Because the nameserver data is missing, analysts should consider querying passive DNS sources for historic records that might reveal additional associated hostnames. Continuous review of blocklist updates and threat‑intel feeds is recommended to capture any new indicators tied to this domain, especially if the phishing campaign evolves or expands to additional infrastructure.