us-ledgr[.]wixstudio[.]com

This domain, us-ledgr.wixstudio.com, is flagged as a high-risk phishing infrastructure specializing in fake login credential harvesting. Analysis indicates the absence of overt brand impersonation or cryptocurrency drainer kit signatures, suggesting a generic credential theft operation targeting users through deceptive login prompts. The site leveraged Wix Studio’s hosting environment, which may have facilitated rapid deployment and evasion of initial detection. Infrastructure analysis reveals the following technical indicators: the domain was detected by 15 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. The domain resolves to IP address 34.144.206.118, hosted on Google Cloud infrastructure, and employs a Let’s Encrypt SSL certificate. Technologies detected include Wix, React, Lodash, HSTS, Google Cloud CDN, and HTTP/3. The domain was registered through GoDaddy.com, LLC, with a creation date of May 05, 2026, an anomalous timestamp likely indicative of falsified registration data. No Google Safe Browsing (GSB) hits were recorded prior to takedown. The domain is currently offline, though its prior activity and registration irregularities pose residual risks. The use of legitimate hosting platforms and SSL certificates demonstrates an attempt to blend malicious activity with benign infrastructure. While the immediate threat has been mitigated, the domain’s registration details and hosting patterns suggest potential for re-emergence under altered identifiers. Users are advised to verify domain registration dates and cross-reference security vendor detections before interacting with similar sites. Network defenders should monitor for domains with comparable hosting profiles, particularly those leveraging Wix Studio or Google Cloud with recent or implausible creation dates.