startd-ledjor-appsso[.]wixstudio[.]com

Analysis indicates that the domain startd-ledjor-appsso.wixstudio.com is actively being used for credential harvesting. The site was registered on December 17, 2016 through the Wix Studio platform, a service that provides hosted website creation tools. It has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, confirming that at least one external mitigation system has identified malicious activity associated with the host.

VirusTotal scans show that 12 out of 91 security vendors have flagged the domain, providing independent corroboration of its suspicious nature. The exact malicious payload, page content, or target brand has not been disclosed in the available intelligence, so the specific phishing lure employed remains uncertain. No public information about the hosting IP address, ASN, SSL certificate details, HTTP response codes, or Safe Browsing status is currently available, limiting deeper infrastructure profiling.

Defenders should treat any traffic to this domain as hostile, block network resolution and HTTP requests at the perimeter, and add the domain to internal blocklists. Continuous monitoring of security vendor feeds for additional detections is advised, as further analysis may reveal the underlying phishing kit or campaign tactics. Organizations should also review endpoint logs for connections to startd-ledjor-appsso.wixstudio.com and investigate any credential submissions that might have been captured by the site.