ladgerr[.]wixstudio[.]com

PhishDestroy identifies ladgerr.wixstudio.com as an active crypto drainer impersonation domain under investigation, presenting a medium-high risk to potential victims. This domain leverages the WixStudio platform, a legitimate site builder, to host malicious content designed to deceive users into connecting cryptocurrency wallets under false pretenses. Early analysis shows zero detections across 95 VirusTotal engines, suggesting this threat may be flying under the radar. The domain resolves to IP 34.144.206.118, hosted within a Google Cloud environment, and utilizes a Let's Encrypt SSL certificate to appear trustworthy. No blocklist entries or historical reputation data are currently available for this domain, and its creation date remains unverified at this stage.

The lack of detections on VirusTotal—currently 6/95—combined with its recent activation and absence from known threat intelligence feeds, raises concerns about its ability to evade detection systems. This domain exhibits characteristics typical of opportunistic crypto drainers: a hastily constructed WixStudio subdomain, fresh infrastructure, and no discernible trust indicators. Additionally, the use of a legitimate hosting provider like Google Cloud may lend false credibility to the site, while the Let's Encrypt certificate further obscures malicious intent. While no specific brand impersonation has been confirmed, the generic nature of the subdomain (ladgerr) suggests it may target users through broad phishing campaigns rather than a single high-profile impersonation.

To mitigate risk, avoid interacting with this domain or any links associated with it. Users should verify the legitimacy of cryptocurrency-related websites by cross-referencing official sources and never connect wallets to unfamiliar platforms. Organizations are advised to update browser-based protections to include newly identified crypto drainer IOCs and monitor outbound connections to IP 34.144.206.118. If connectivity cannot be avoided, implement network segmentation and restrict wallet connection permissions to prevent unauthorized transactions. Report any potential exposure to your security team immediately.