startsdesktop-ldgre[.]wixstudio[.]com

Analysis as of July 29 2026 indicates that the domain startsdesktop-ldgre.wixstudio.com is actively leveraged in a generic phishing campaign and should be treated as high-risk. The domain was created on 17 December 2016 and is registered through the Wix Studio platform, a site-builder service that allows rapid deployment of web content. VirusTotal reports that six of ninety-one scanning engines have flagged the domain, providing independent confirmation of malicious use. The domain appears on a single public security blocklist and is explicitly listed by the PhishDestroy blocklist, confirming that at least one anti-phishing service has taken remediation action.

The overall risk rating assigned to the infrastructure is elevated, and the operational status is marked as active, indicating ongoing exploitation. Publicly available intelligence does not include details such as the hosting IP address, autonomous system number, geographic location, SSL certificate characteristics, HTTP response codes, or the page title displayed when the site is accessed. Consequently, defenders lack concrete indicators beyond the domain name itself and the detection history. No evidence of safe-browsing status or additional blocklist listings is currently reported.

Given the limited but consistent evidence of malicious activity, security teams should incorporate startsdesktop-ldgre.wixstudio.com into domain-based deny lists across perimeter firewalls, DNS filtering solutions, and email gateway filters. Continuous monitoring of threat-intel feeds for any new detections or changes in the blocklist status is recommended. Analysts should also consider querying the domain in sandbox environments if a URL is observed in phishing emails, to capture any dynamic behavior. Until further technical artifacts become available, the presence of the domain in logs should trigger an elevated alert and appropriate investigative steps.