strt-ledgr-com[.]wixstudio[.]com

strt-ledgr-com.wixstudio.com was first registered on December 17, 2016 through GoDaddy.com, LLC. The authoritative name servers are dns1.p08.nsone.net through dns4.p08.nsone.net, and the domain resolves to 34.144.206.118, an address owned by Google LLC (AS396982) located in the United States. The site presents a Let’s Encrypt certificate issued under the R13 profile, and TLS negotiation includes HSTS and HTTP/3 support, indicating modern web stack usage. Content delivery is performed via Google Cloud CDN, and the front‑end is built on Wix and React with Lodash library components. The page title returned by the server is exactly “strt‑ledgr‑com.wixstudio.com”.

HTTP probing returned a 404 status code, and the domain has been taken offline at the time of observation. VirusTotal analysis shows that 5 of 91 scanned security vendors flagged the host, confirming a malicious classification. The domain appears on a single public blocklist and is specifically listed by PhishDestroy as a phishing‑related entry. No additional public threat‑intel sources such as OTX or Safe Browsing were referenced in the supplied data.

Analysis indicates that the infrastructure aligns with typical phishing hosting patterns: a fast‑deployed Wix site, hosted on Google Cloud, and protected by a free Let’s Encrypt certificate. The limited detection count suggests the payload may be simple or short‑lived, but the presence on a dedicated phishing blocklist warrants caution. Defenders should block DNS resolution for the domain and its associated IP address, enforce outbound filtering for HTTP/HTTPS traffic to the address, and monitor for any future re‑registration attempts. Continuous re‑scanning of the domain after any change in status is recommended to capture potential re‑activation.