openstart-ledgr[.]wixstudio[.]com

The domain openstart-ledgr.wixstudio.com was registered on May 25, 2026 through GoDaddy.com, LLC and is hosted on Google Cloud infrastructure, resolving to IP address 34.144.206.118 located in the United States. The site employs Wix, React, Google Cloud CDN, and HTTP/3, and serves a TLS certificate issued by Let’s Encrypt. An HTTP request to the root URL returns a 404 status with the page title “404 Error: Page Not Found | Wix Studio,” indicating that the expected content is not publicly available.

The domain has been flagged by the PhishDestroy blocklist and appears on a single security blocklist, suggesting that at least one security vendor has identified it as malicious. VirusTotal analysis shows that three of ninety‑one scanning engines have flagged the domain, providing additional corroboration of its suspicious nature. Nameserver records list dns1.p08.nsone.net through dns4.p08.nsone.net, consistent with standard DNS configuration for a Wix‑hosted site.

The current operational status is offline, implying that the malicious payload or phishing landing page is no longer reachable, but the infrastructure artifacts remain observable. Defenders should continue to monitor the IP address and associated CIDR ranges for any reactivation, enforce blocklist rules that include this domain, and consider adding the IP to network‑level deny lists. Because the site returns a generic 404 page, the exact phishing content cannot be confirmed, and investigators should treat the domain as a potential placeholder for future campaigns pending further evidence.