live-ledgar-com[.]wixstudio[.]com

This domain, live-ledgar-com.wixstudio.com, is identified as a credential phishing site targeting users through deceptive login prompts. Analysis indicates no direct association with known brand impersonation or drainer kits, though the infrastructure aligns with typical phishing campaigns leveraging free hosting services. The domain was constructed to mimic legitimate login portals, likely harvesting credentials for unauthorized access or secondary attacks. Infrastructure analysis reveals the domain resolves to IP address 34.144.206.118, hosted on Google Cloud with HTTP/3 and Google Cloud CDN enabled. It was registered via GoDaddy.com, LLC on May 06, 2026, an anomalous creation date suggesting potential domain spoofing or backdating. The SSL certificate is issued by Let's Encrypt, a common choice for malicious actors due to its free and automated issuance. VirusTotal detection shows 4/95 security vendors flagging the domain, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The domain has been taken offline, reducing immediate risk of credential theft. However, residual threats persist, including potential reuse of the same infrastructure or IP for future phishing campaigns. Organizations should monitor for related domains registered through the same registrar or resolving to the same IP range. Users are advised to verify domain authenticity before entering credentials, particularly on sites hosted on free platforms like Wix Studio. Network-level blocking of 34.144.206.118 is recommended as a precautionary measure.