comstarts-ledgo[.]wixstudio[.]com

This domain is under investigation for generic phishing activity, targeting users through deceptive landing pages or credential harvesting schemes. Analysis indicates no prior malicious classification, but the infrastructure and hosting patterns align with low-sophistication phishing campaigns designed to evade initial detection. Infrastructure analysis reveals the domain comstarts-ledgo.wixstudio.com was registered on December 17, 2016, through GoDaddy.com, LLC. It currently resolves to the IP address 34.144.206.118 and holds a Let's Encrypt SSL certificate (YR1). VirusTotal reports zero detections across 95 engines (0/95), though it appears on one security blocklist. The domain remains active, with no prior history of takedowns or sinkholing. Mitigation steps include blocking the domain and its resolving IP (34.144.206.118) at the network perimeter. Security teams should monitor for connections to this endpoint, particularly from endpoints exhibiting anomalous behavior such as unexpected credential prompts or browser redirects. Given the domain's age and lack of prior detections, retrospective log analysis is recommended to identify any prior compromise indicators. If brand impersonation is confirmed, initiate takedown procedures through the registrar or hosting provider.