ledgrocom[.]wixstudio[.]com

This domain, ledgrocom.wixstudio.com, is flagged as a generic phishing infrastructure targeting users through a Wix Studio-hosted page. Analysis indicates no direct brand impersonation in the visible content, though the 404 error page may mask prior malicious activity. The domain likely served as a temporary redirect or credential-harvesting endpoint before being taken offline. No specific drainer kit signatures were identified in the available data, but the use of Wix’s platform suggests an attempt to exploit trusted cloud services for phishing distribution. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC, with a creation date of April 15, 2026, indicating a recently established asset. It resolves to the IP address 34.144.206.118, hosted on Google Cloud with HTTP/3 and Google Cloud CDN technologies detected. VirusTotal reports 12 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites due to its free and automated issuance process. No Google Safe Browsing (GSB) detections were recorded at the time of analysis. The domain is currently offline, likely due to takedown actions by the hosting provider or security entities. Despite its inactive status, residual risk remains for users who may have interacted with the domain during its active phase. Organizations are advised to monitor for indicators of compromise, including the IP address 34.144.206.118 and the domain itself, in network logs. Security teams should verify whether internal systems accessed this infrastructure and assess potential exposure. Proactive blocking of the domain and IP at perimeter defenses is recommended to prevent future access attempts.