startledjer-eng[.]wixstudio[.]com

The domain startledjer-eng.wixstudio.com was created on 17 December 2016 and is hosted through the Wix Studio registration service. VirusTotal scans show that 15 of 91 security vendors have flagged the domain, indicating a moderate level of detection across independent engines. The site is currently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service, reinforcing its classification as malicious infrastructure.

The threat‑type assigned to the domain is generic phishing, and the risk level is elevated, with the operational status marked as active as of the report date, 29 July 2026. No additional public data such as IP address, autonomous system number, TLS certificate details, HTTP response codes, page title, or brand targeting has been disclosed, leaving those vectors unverified at this time. Consequently, analysts cannot confirm the specific landing page content or the exact credential‑harvesting mechanisms employed.

Defenders should treat the domain as hostile: incorporate it into DNS and URL filtering policies, ensure outbound traffic to the associated Wix Studio hosting endpoints is monitored, and consider sharing the indicator with internal threat‑intel feeds. Continuous re‑evaluation is recommended, as further enrichment (e.g., host resolution, payload samples, or victim reports) could clarify the attack flow and support more granular mitigation.