ldgrcomstart[.]wixstudio[.]com

PhishDestroy identifies ldgrcomstart.wixstudio.com as a live crypto drainer phishing campaign. The domain is actively resolving and remains undetected by security vendors. The site impersonates a legitimate service to trick users into connecting crypto wallets and approving malicious transactions. ldgrcomstart.wixstudio.com was flagged by 3 of 95 VirusTotal vendors as of the latest scan. The domain resolves to IP 34.144.206.118 and uses a Let's Encrypt SSL certificate. Wix is the hosting platform, and the domain was created recently. It has not yet been added to major blocklists and maintains moderate trust scores across threat intelligence feeds. The absence of detections suggests this campaign is either newly launched or employs evasion techniques to bypass initial scans. This domain is active and poses a high risk to cryptocurrency users, particularly those interacting with Web3 platforms. PhishDestroy recommends blocking access to ldgrcomstart.wixstudio.com at the network level and reporting the domain to threat intelligence platforms such as VirusTotal, AbuseIPDB, and PhishTank. Users should avoid clicking links from unsolicited messages and verify any unexpected crypto-related communications through official channels. Monitor wallet transactions closely and revoke any suspicious approvals immediately.