ledzerlive-browser[.]wixstudio[.]com

Analysis of ledzerlive-browser.wixstudio.com on July 29, 2026 identifies this domain as an active phishing endpoint hosted on Wix Studio infrastructure. Infrastructure checks reveal the domain currently resolves to IP address 34.144.206.118, which is associated with Google Cloud services. No nameserver records were detected during the scan, which may indicate recent domain registration or an attempt to obscure DNS configuration. VirusTotal telemetry shows 11 of 91 security vendors flagging this domain, with classifications including phishing and credential theft. The domain appears on one security blocklist, specifically PhishDestroy, which has marked it as malicious.

No additional blocklist presence, Safe Browsing status, or Open Threat Exchange data was provided in the available intelligence. The domain uses a Wix Studio subdomain, suggesting the attacker leveraged a legitimate website builder platform to create the phishing page. This tactic is common among threat actors seeking to bypass initial reputation filters by hosting malicious content on trusted domains. The exact content of the phishing page remains unconfirmed; no page title, brand target, or phishing kit details were supplied in the available data.

Defenders should treat this domain as an elevated risk for credential harvesting. Recommended actions include blocking the domain at the perimeter, adding it to endpoint protection denylists, and monitoring for connections to the associated IP 34.144.206.118. If internal access is detected, initiate incident response to identify compromised credentials and contain potential account takeovers. Given the use of cloud hosting, defenders should also check for related domains or IPs within the same ASN range for broader campaign tracking.