legor-live[.]wixstudio[.]com

legor-live.wixstudio.com was created on 8 June 2026 and is hosted through Wix Studio, as indicated by the registrar information. The domain resolves to the NSOne name server set (dns1.p08.nsone.net through dns4.p08.nsone.net), a common configuration for Wix‑hosted sites. Within two weeks of its creation the domain has already been listed on a security blocklist and is actively blocked by the PhishDestroy feed, indicating that threat‑intelligence providers have observed malicious activity associated with it.

VirusTotal scans show that 12 of 91 antivirus and URL‑reputation engines flag the domain, reinforcing the suspicion of phishing use. No additional public indicators such as an OTX pulse, Safe Browsing entry, or known IP reputation are currently disclosed. Likewise, SSL certificate details, HTTP response codes, page title, and content analysis have not been published, so the exact nature of the hosted page remains unknown beyond the generic phishing classification supplied in the seed data.

The convergence of recent registration, presence on a blocklist, active blocking by PhishDestroy, and multiple vendor detections suggests an elevated risk profile. Defenders should add legor-live.wixstudio.com to outbound filtering rules, deny any internal connections to the host, and monitor DNS queries for the four NSOne name servers for related activity. Continuous re‑evaluation is advised as further intelligence, such as URL screenshots, certificate data, or additional vendor detections, becomes available.