desktop-ledgor[.]wixstudio[.]com

PhishDestroy identifies desktop-ledgor.wixstudio.com as an active fake login scam targeting unsuspecting users. This Wix-hosted domain is designed to harvest credentials under false pretenses, posing a direct threat to financial and personal security. The campaign is currently live and remains undetected by most antivirus engines, indicating a stealthy operation targeting crypto users specifically.

This domain was flagged during routine threat intelligence gathering with a seed identifier of 4a9feb. VirusTotal reports 0 out of 95 detections, indicating no current AV signatures against the domain. The domain resolves to IP address 34.144.206.118, which is associated with cloud hosting infrastructure. The SSL certificate is issued by Let's Encrypt, providing a false sense of legitimacy. The WixStudio subdomain suggests a quick deployment of a fake login page mimicking a legitimate service interface.

PhishDestroy recommends immediate verification of this domain using our platform. Users should avoid entering any credentials or personal information on desktop-ledgor.wixstudio.com or any linked pages. The threat type is specifically a fake login credential harvester, likely intended to drain cryptocurrency wallets or gain unauthorized access to financial accounts. If exposure has occurred, users must revoke any entered credentials immediately, enable two-factor authentication on all associated accounts, and monitor wallets for unauthorized transactions. Report this domain to PhishDestroy for inclusion in our blocklist to protect other users.