apps-ledgar-strt[.]wixstudio[.]com

This domain is flagged as a high-risk credential harvesting phishing site designed to deceive users into submitting sensitive login credentials. Analysis indicates the infrastructure was configured to mimic legitimate authentication portals, likely targeting corporate or financial service users. The domain’s deceptive intent is supported by its rapid takedown and security vendor detections. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on May 02, 2026, an anomalous future date suggesting potential registry manipulation. It resolved to IP 34.144.206.118, hosted on Google Cloud with technologies including Wix, React, and Google Cloud CDN. Security vendor detections on VirusTotal reached 15/95, while Gridinsoft assigned a trust score of 0/100. The domain appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD, and was taken offline following detection. Mitigation requires immediate action from network administrators and end-users. Organizations should block the domain and its resolving IP at firewall and DNS levels. Users who accessed the site must reset credentials for any accounts entered, particularly if reused across platforms. Security teams should review logs for connections to 34.144.206.118 or the domain between its registration and takedown. Monitoring for similar Wix Studio-hosted phishing pages is recommended, given the platform’s use of Let’s Encrypt SSL certificates and Google Cloud infrastructure.