ladgar-apps[.]wixstudio[.]com

PhishDestroy identifies ladgar-apps.wixstudio.com as an active, generic-phishing site hosted on Wix’s platform that could be used to deliver counterfeit login portals and harvest user credentials. The domain currently resolves to Google Cloud IP 34.144.206.118 and is served over a Let’s Encrypt SSL certificate, giving it an appearance of legitimacy. Because the site remains undetected by 95 VirusTotal engines, users cannot rely on antivirus warnings and should treat any prompts for passwords or payment details as highly suspect.

This domain was flagged on seed 465115 with zero VirusTotal detections out of 95 engines, indicating a low but real risk of evading automated scanners. WixStudio subdomains can be spun up quickly with minimal validation, making them attractive to threat actors who need disposable infrastructure. The lack of historical detections suggests the site is either very new or deliberately crafted to bypass signature-based filters. Technical indicators such as the Let’s Encrypt certificate and the Google Cloud IP (34.144.206.118) are consistent with other phishing campaigns that favor reputable hosting providers to evade IP-based blocking.

If you visited ladgar-apps.wixstudio.com, assume your credentials or personal information may have been exposed. Immediately change any passwords you might have entered on the site and enable multi-factor authentication on all accounts that share those credentials. Run a full antivirus scan on your device to check for follow-on malware. Report the domain to your email provider, bank, and any other services where you may have reused credentials. Do not trust subsequent emails or messages that reference this domain, as they are likely part of the same campaign. Disable browser extensions temporarily to prevent additional credential theft, and consider using a password manager that warns against reused or compromised passwords.