started-ledgrocom[.]wixstudio[.]com

PhishDestroy has confirmed that the domain started-ledgrocom.wixstudio.com, which was flagged as a generic phishing threat with an elevated risk level, has been successfully taken offline. This particular phishing scheme was engineered as a crypto drainer, designed to trick visitors into connecting their cryptocurrency wallets and subsequently steal their digital assets. The elevated risk classification reflected the sophisticated social engineering tactics employed, which often mimic legitimate decentralized finance platforms or wallet connection prompts.

The threat intelligence gathered reveals that this domain was registered through GoDaddy.com, LLC and resolved to the IP address 34.144.206.118. VirusTotal analysis shows that 2 out of 95 security vendors flagged the domain as malicious, while it appeared on 1 security blocklist. The page displayed a 404 error message from Wix Studio, indicating the site was either misconfigured or quickly dismantled. These technical indicators—combined with the use of a free hosting platform and a low blocklist presence—suggest the attackers were operating with minimal sophistication but still posed a real financial risk to crypto users.

Users who may have interacted with this domain should immediately check their cryptocurrency wallets for unauthorized transactions and revoke any permissions granted to suspicious sites. Enabling two-factor authentication on all crypto-related accounts and using hardware wallets for storage can further mitigate risk. As a general precaution, always verify URLs carefully before connecting a wallet, and avoid clicking on unsolicited links promoting airdrops, giveaways, or urgent wallet updates. PhishDestroy recommends reporting any similar domains to relevant security platforms and maintaining updated browser extensions that detect phishing attempts.