appstart-ledgrrs[.]wixstudio[.]com

This domain is classified as high-risk due to its association with generic phishing activity targeting user credentials and sensitive information. Analysis indicates the domain was designed to mimic legitimate services, likely to harvest login details, financial data, or personal identifiers through fraudulent web pages. Infrastructure analysis reveals the domain resolves to IP address 34.144.206.118 and was registered on April 17, 2026, through GoDaddy.com, LLC. It is currently offline, but during its active period, it was flagged by 16 out of 95 security vendors on VirusTotal. The domain appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. Detected technologies include Wix, React, Google Cloud, Google Cloud CDN, and HTTP/3, with an SSL certificate issued by Let’s Encrypt. The page title, '404 Error: Page Not Found | Wix Studio,' suggests either a takedown or an attempt to evade detection. Mitigation for this threat involves immediate blocking of the domain and its associated IP (34.144.206.118) at the network perimeter. Security teams should review logs for connections to this domain or IP within the past 30 days, particularly focusing on user agents and referrer headers that may indicate phishing attempts. End-user education should emphasize recognizing phishing indicators, such as mismatched URLs, unsolicited credential requests, and generic error pages masking malicious intent. If credentials were entered on this domain, password resets and multi-factor authentication enforcement are recommended for affected accounts.