ledergapp-us[.]wixstudio[.]com

Domain ledergapp-us.wixstudio.com has been flagged for generic phishing activity. This Wix-hosted site is currently under investigation for hosting a credential-harvesting landing page designed to trick users into submitting sensitive login details. No known crypto-drainer toolkit or brand impersonation signature has been positively identified at this stage, but the page mimics legitimate onboarding flows to harvest plaintext credentials. This domain resolves to 34.144.206.118 via a Let’s Encrypt SSL certificate and shows zero detections on VirusTotal (4/95 engines as of latest scan). The registrar is Wix.com, the domain was created within the past 30 days, and Google Safe Browsing currently lists it as untested (no GSB block). Public blocklists have not yet flagged the IP or domain, maintaining a low public footprint despite active phishing operations. The threat remains active and under continuous monitoring. Immediate response includes network-level blocking of 34.144.206.118 and domain-wide takedown coordination with Wix abuse channels. Remaining risk is assessed as medium due to low VT coverage and the absence of widespread blocklist inclusion, allowing the page to remain accessible to potential victims. Users are advised to avoid clicking the link, verify any unexpected login prompts via official channels, and report the domain to their security teams or via abuse channels.