startsso-ledzer-live[.]wixstudio[.]com

The domain startsso-ledzer-live.wixstudio.com is identified as a fake login phishing portal targeting user credentials. As of the latest scan, the domain has been taken offline, though it remains a documented threat in security databases. No specific brand impersonation has been confirmed, but the site mimics generic login interfaces to harvest credentials. Analysis indicates the domain was flagged by 13 of 95 VirusTotal security vendors, registered through GoDaddy.com, LLC on June 11, 2026, and resolved to the IP address 34.144.206.118. It appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. Infrastructure analysis reveals the use of Wix hosting, React for frontend development, Google Cloud for backend services, and a Let's Encrypt SSL certificate. Additional technologies detected include Lodash, HSTS enforcement, Google Cloud CDN, and HTTP/3 protocol support. While the domain is currently offline, its prior activity and detection metrics classify it as high-risk. Organizations and individuals are advised to block the domain and its associated IP at the network level. Security teams should monitor for residual DNS queries or cached references to the domain. End-users who may have interacted with the site should reset credentials for any accounts accessed during the exposure window and enable multi-factor authentication where available. Network logs should be reviewed for connections to 34.144.206.118 or related subdomains.