guidestart-ldgrcdn[.]wixstudio[.]com

PhishDestroy identifies guidestart-ldgrcdn.wixstudio.com as a generic phishing domain impersonating a login portal. The site appears to leverage WixStudio’s legitimate hosting infrastructure (wixstudio.com) to lend false credibility to its fraudulent scheme. No specific drainer kit or branded target has been confirmed at this stage, but the malicious intent centers on harvesting user credentials under the guise of a guidance or leadership portal.

This domain resolves to a single IP (34.144.206.118) via Let’s Encrypt SSL, and currently yields 0 detections out of 95 engines on VirusTotal as of seed 807cd5. The registrar is Wix.com, the creation date is recent, and Google Safe Browsing (GSB) has not yet flagged the domain, with no confirmed listings on major threat blocklists.

The domain remains active and under active investigation. Users are strongly advised to avoid interacting with this site and to report any suspicious activity. While the immediate risk of widespread detection is low due to the 4/95 VirusTotal score, the threat model includes credential theft via fake login forms. Remaining risk is assessed as moderate until takedown or deactivation occurs.