live-ledglog[.]wixstudio[.]com

This domain, live-ledglog.wixstudio.com, is identified as a credential harvesting phishing site designed to deceive users into submitting login credentials, financial details, or other sensitive information. The infrastructure leverages Wix Studio’s hosting platform to present fraudulent login interfaces, often mimicking legitimate services such as banking portals, email providers, or corporate authentication systems. Analysis of the page source and redirect behavior indicates the use of obfuscated JavaScript to capture user input before transmitting it to attacker-controlled servers. The domain’s 404 error status suggests it may have been taken down or moved, but its prior activity remains a significant threat to unsuspecting visitors. Infrastructure analysis reveals multiple indicators of malicious intent. The domain was registered on April 13, 2026, through GoDaddy.com, LLC, a common registrar for both legitimate and malicious sites. It resolves to the IP address 34.144.206.118, which has been associated with other phishing campaigns. Detection engines report 13 out of 95 security vendors on VirusTotal flagging the domain as malicious, while it appears on three independent security blocklists, including community-driven and enterprise-grade threat intelligence feeds. The domain’s SSL certificate, issued by Let’s Encrypt, provides encryption but does not validate legitimacy, a tactic frequently exploited by phishing operators to appear trustworthy. Users who visited live-ledglog.wixstudio.com or interacted with its content should take immediate remedial action. If credentials were entered, affected accounts must be secured by resetting passwords and enabling multi-factor authentication where available. System scans using updated anti-malware tools are recommended to detect potential secondary infections, such as keyloggers or remote access trojans. Network logs should be reviewed for connections to 34.144.206.118 or related domains. Organizations should update their blocklists to include this domain and its associated IP to prevent future access. Given the domain’s prior activity, vigilance is advised for similar phishing attempts using Wix Studio or other hosting platforms.