starta-ledgr[.]wixstudio[.]com

PhishDestroy identifies starta-ledgr.wixstudio.com as a crypto drainer phishing domain actively targeting cryptocurrency users through deceptive Wix-hosted pages. Security researchers have flagged this domain due to its suspicious infrastructure and lack of legitimate cryptocurrency-related activity. The domain leverages a free WixStudio subdomain to appear legitimate while hosting malicious scripts designed to drain digital wallets during fraudulent transactions. This domain was flagged during routine threat intelligence analysis after VirusTotal scans returned 0 detections out of 95 security engines, indicating minimal immediate recognition despite behavioral anomalies. The domain resolves to IP address 34.144.206.118, which is associated with cloud hosting infrastructure commonly abused by threat actors. The SSL certificate issued by Let’s Encrypt suggests an attempt to establish trust through encryption, a tactic frequently used to deceive cautious users. WixStudio subdomains are often exploited due to their low barrier to creation and legitimate appearance. If you visited starta-ledgr.wixstudio.com, disconnect from the internet immediately and inspect your device for unauthorized cryptocurrency wallet connections or browser extensions. Do not authorize any transactions or input wallet credentials on the site. Review your wallet’s transaction history for suspicious outbound transfers. Use a reputable antivirus scan to check for malware, and consider revoking any connected wallet permissions via blockchain explorers. Report the domain to PhishDestroy and your cybersecurity team to aid in blocking further abuse.