ledzr-desktopcdn[.]wixstudio[.]com

Analysis of ledzr-desktopcdn.wixstudio.com indicates that the domain remains active and is currently associated with a generic phishing campaign. The domain was registered through Wix.com Ltd., a widely used website‑builder platform, and resolves to the IP address 162.159.143.12. Hosting infrastructure appears to be part of the Wix CDN network, which is commonly shared among many legitimate sites, making IP‑based reputation checks less discriminating. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one external sinkhole considers it malicious.

VirusTotal records show that the domain has been scanned by 91 antivirus and URL‑reputation vendors, none of which reported a detection at the time of analysis; this absence of alerts should not be interpreted as evidence of benign intent. Nameserver information is unavailable (NS_NOT_FOUND), limiting the ability to trace delegation chains or identify potential misconfigurations. No publicly available Safe Browsing, Open Threat Exchange, SSL certificate details, HTTP response codes, trust‑score metrics, page titles, or additional evidence links were provided, leaving those vectors unverified. Consequently, the primary confidence in the malicious classification derives from the blocklist entry and the phishing‑specific attribution supplied by the reporting source.

Defenders should continue to block or sinkhole traffic to the domain, monitor outbound connections to the associated IP address, and consider adding the domain to internal URL filtering rules. Given the shared hosting environment, correlation with other Wix‑hosted assets may produce false positives; therefore, any remediation should be scoped to the specific host header or URL patterns observed in malicious activity. Ongoing observation is advised to detect any changes in blocklist status, detection vendor reports, or infrastructure modifications that could affect risk posture.