ssostrted-ledzarcdn[.]wixstudio[.]com

This domain, ssostrted-ledzarcdn.wixstudio.com, is identified as a credential harvesting phishing site designed to impersonate legitimate authentication portals. Analysis indicates the domain was actively used to deceive users into submitting sensitive login credentials, likely targeting corporate or personal accounts. The domain is currently offline, though prior activity suggests it may have been part of a broader phishing campaign leveraging cloud-based hosting services. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on June 03, 2026, an anomalous creation date that may indicate domain spoofing or backdating. It resolves to the IP address 34.144.206.118, hosted on Google Cloud infrastructure, and is flagged by 17 of 95 security vendors on VirusTotal. The domain appears on one security blocklist and was previously blocked by PhishDestroy. The SSL certificate is issued by Let’s Encrypt, a common tactic to lend superficial legitimacy to phishing sites. Detected technologies include Wix, React, Google Cloud CDN, and HTTP/3, suggesting the use of modern web frameworks to evade basic detection mechanisms. Current status indicates the domain has been taken offline, though residual risk remains due to its prior activity. Organizations and individuals are advised to block the domain and its associated IP address (34.144.206.118) at the network level. Security teams should review logs for connections to this domain or IP, particularly those involving authentication attempts. Users who may have interacted with the site should reset credentials immediately and enable multi-factor authentication where available. Monitoring for similar domains registered through the same registrar or hosted on Google Cloud infrastructure is recommended to preempt potential follow-up campaigns.