intro-ldger-live[.]wixstudio[.]com

The domain intro-ldger-live.wixstudio.com was created on December 17, 2016 and registered through the Wix Studio platform. DNS resolution points to the IPv4 address 34.144.206.118, an address commonly associated with Wix‑hosted web services. Authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, indicating the use of NSONE’s DNS infrastructure. Current threat intelligence classifies the domain as active with an elevated risk level and identifies it as a generic phishing operation.

VirusTotal scans have returned six positive detections out of ninety‑one security engines, demonstrating that a minority of scanners have identified malicious characteristics. The domain is listed on one external blocklist and is actively blocked by the PhishDestroy service, providing additional confirmation of its abusive nature. No public information is available regarding SSL certificate details, HTTP status codes, page title, or any observed landing page content, leaving the exact phishing payload or credential‑harvesting technique undetermined.

Defenders should treat the domain as malicious: block DNS resolution for the full FQDN, enforce network‑level deny rules for the IP 34.144.206.118, and consider adding the associated NSONE name servers to sink‑hole policies to capture any future sub‑domains. Endpoint protection solutions should be updated to include the domain and its IP in reputation feeds, and security operations teams should monitor for any outbound traffic or authentication attempts targeting this host. Continuous re‑assessment is recommended as additional indicators may surface, but the existing evidence—multiple vendor detections, blocklist inclusion, and active blocking by PhishDestroy—warrants immediate mitigation.