ledzer-liveapp[.]wixstudio[.]com

Analysis of ledzer-liveapp.wixstudio.com, observed on July 25, 2026, indicates that the domain is actively used in a generic phishing campaign and remains under investigation. The sub‑domain is registered through Wix.com Ltd., a platform that provides website building and hosting services, and resolves to the IP address 162.159.143.12, which is part of a Cloudflare‑owned range commonly associated with Wix‑hosted sites. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the view that it is being used for malicious purposes.

VirusTotal records show that the domain was scanned by 91 antivirus vendors, none of which raised a detection at the time of the scan; however, the absence of detections does not constitute evidence of safety, as phishing payloads can evade automated signatures. No additional technical artifacts such as SSL certificate details, HTTP response codes, or page title information have been disclosed, leaving the content of the landing page unverified. Nameserver information is not available, limiting visibility into the domain’s DNS configuration.

Defenders should treat the domain as hostile: block the full host name and its parent domain at perimeter firewalls, proxy filters, and endpoint protection solutions; add the IP address 162.159.143.12 to network‑level deny lists; continue monitoring for any new indicators that may emerge from the hosting provider or related sub‑domains; and consider sharing the indicator set with threat‑intelligence communities to improve collective detection. Ongoing observation is recommended to capture any changes in hosting, content, or associated infrastructure that could affect risk assessments.