en-ldgrstart[.]wixstudio[.]com

The domain en-ldgrstart.wixstudio.com was observed on July 25 2026 and is currently listed as offline. Registration records show it was created on 21 April 2026 through GoDaddy.com, LLC, and the authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net and dns4.p08.nsone.net. DNS resolution points to the IPv4 address 34.144.206.118, a Google Cloud host located in the United States. The site presented a TLS certificate issued by Let’s Encrypt (R12) and the HTTP response returned a 404 status code with the page title “404 Error: Page Not Found | Wix Studio”.

Technical fingerprinting identified the Wix platform, React, Google Cloud services, Lodash, HSTS, Google Cloud CDN and HTTP/3 as present in the page header. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed. VirusTotal analysis recorded five positive detections out of ninety‑four scanners, and Gridinsoft assigned a trust score of zero out of one hundred, indicating a high confidence of malicious intent. The evidence collectively points to a generic phishing infrastructure that was likely used to host a fraudulent landing page before being taken down.

Because the site no longer serves content, the precise phishing lure and any credential‑harvesting forms remain unknown. Defenders should continue to block the host IP and associated name servers, add the domain to local deny lists, and monitor for newly created Wix subdomains that exhibit similar registration patterns or technology stacks. Ongoing correlation with threat‑intel feeds is recommended to detect any re‑use of the same infrastructure.