ledgr-liv-cloud-ai[.]wixstudio[.]com

PhishDestroy identifies ledgr-liv-cloud-ai.wixstudio.com as a credential theft phishing domain currently under investigation for active abuse. This Wix-hosted subdomain mimics a legitimate cloud service portal, likely targeting users of financial or data management platforms by harvesting login credentials. The campaign remains operational, with no confirmed takedown as of the latest analysis cycle. ledgr-liv-cloud-ai.wixstudio.com was flagged by 13 of 95 VirusTotal vendors and resolves to IP 34.144.206.118. The domain uses a Let's Encrypt SSL certificate and is hosted on Wix’s infrastructure, which has been leveraged in multiple phishing campaigns due to its legitimate appearance and free hosting options. No public record identifies a creation date within standard WHOIS databases due to Wix’s privacy masking, and blocklist inclusion remains undetected. This domain’s low detection rate suggests it may be newly deployed or using evasion tactics to bypass initial scans. This domain is active and poses a credential theft risk via a fake login interface. Users should avoid entering any credentials or sensitive data. Security teams are advised to block the domain at DNS and firewall levels, monitor for outbound connections to 34.144.206.118, and inspect internal systems for signs of compromised credentials. Immediate action includes reporting the domain to threat intelligence platforms and domain registrars. Regular scanning of Wix subdomains for spoofed services is recommended to mitigate similar threats.