ledgrrlogi[.]wixstudio[.]com

PhishDestroy identifies ledgrrlogi.wixstudio.com as an active phishing domain currently under investigation for generic phishing threats. The domain poses a verified risk to users through deceptive tactics designed to harvest sensitive credentials or deliver malware under the guise of legitimate services. As of seed 190a41, the domain remains active and is being actively monitored due to its confirmed association with phishing campaigns.

This domain was flagged by OpenPhish and PhishingArmy, two of the most authoritative phishing blocklists. It resolves to a Google Cloud IP address (34.144.206.118) and utilizes a Let's Encrypt SSL certificate to enhance its perceived legitimacy. Despite 0 detections on VirusTotal (4/95 vendors), the domain’s presence on two blocklists underscores its malicious intent. The infrastructure aligns with common phishing hosting patterns, leveraging legitimate cloud services to evade traditional detection mechanisms. The domain’s use of the Wix Studio platform further suggests an attempt to mimic trusted web development environments.

Due to its active status and confirmed association with phishing activities, users should avoid interacting with ledgrrlogi.wixstudio.com entirely. If accessed inadvertently, users should not input any credentials or personal data. Organizations should implement network-level blocking for this domain and the associated IP address (34.144.206.118) to prevent potential compromise. Immediate reporting to security teams or phishing response platforms (e.g., PhishDestroy, OpenPhish) is recommended to aid in ongoing investigations. Continuous monitoring of this domain and its infrastructure is advised, given its current under_investigation status and evolving threat landscape.