strtledgr[.]wixstudio[.]com

PhishDestroy identifies strtledgr.wixstudio.com as an active credential harvesting scam operating at high risk. This domain specifically targets users by impersonating legitimate services to steal login credentials, posing immediate danger to victims' personal and financial data. The domain remains accessible and continues to pose a threat as of the latest analysis, with no signs of takedown or remediation.

This domain was flagged by PhishDestroy after confirming its malicious intent. Key technical indicators include a legitimate-looking SSL certificate issued by Let's Encrypt, which is often abused by threat actors to lend false credibility to phishing pages. The domain resolves to IP address 34.144.206.118 and is currently hosting the scam page. Security vendor VirusTotal detected the threat with only 1 out of 95 vendors flagging it, highlighting the evasive nature of this campaign. Despite low detection rates, PhishDestroy’s analysis confirms the presence of credential harvesting functionality on the site.

Mitigation for this credential harvesting scam requires immediate action. Users should avoid accessing strtledgr.wixstudio.com entirely and report the domain to their IT security teams or anti-phishing platforms. Organizations should implement network-level blocking for the IP address 34.144.206.118 and domain strtledgr.wixstudio.com. Additionally, users who may have entered credentials on this site should immediately change passwords and enable multi-factor authentication on all related accounts. Security teams should monitor for any data exfiltration attempts linked to this campaign and consider blocking traffic to WixStudio subdomains that host suspicious content, as threat actors commonly abuse legitimate hosting platforms for phishing operations.