apps-liveledgr[.]wixstudio[.]com

The domain apps-liveledgr.wixstudio.com is currently listed as an elevated‑risk generic phishing site. VirusTotal analysis shows that four of ninety‑one security vendors flagged the host, indicating a non‑trivial detection rate. The domain resolves to 34.144.206.118, an address owned by Google LLC (AS396982) located in the United States, and is served through Google Cloud CDN with HTTP/3 enabled. TLS is provided by a Let’s Encrypt R13 certificate, which confirms the use of valid encryption but does not mitigate the malicious intent. DNS resolution is handled by four nsone.net name servers (dns1.p08.nsone.net through dns4.p08.nsone.net), a configuration typical for Wix‑hosted sites.

The site’s technology stack includes Wix, React, Lodash, and HSTS, confirming a modern web framework but offering no indication of benign purpose. An HTTP request returns a 404 status code, and the page title mirrors the domain name, suggesting that the content has been removed or is no longer reachable. The domain was created on 17 December 2016 and registered through Wix Studio, which aligns with the observed technology fingerprint. It appears on a single security blocklist and is actively blocked by PhishDestroy, reinforcing the assessment of malicious activity.

At present the host is offline, which may be the result of takedown actions or temporary suspension. However, the historical evidence—vendor detections, blocklist inclusion, and phishing‑specific blocking—remains sufficient for defenders to treat the domain as hostile. Organizations should continue to block the domain at perimeter defenses, monitor DNS queries for the associated IP address, and consider adding the host to internal blocklists. Threat‑intel teams should keep the indicator under observation for any re‑appearance, and any user‑initiated connections should be logged and investigated.