starts-ledgrlive[.]wixstudio[.]com

This domain, starts-ledgrlive.wixstudio.com, is identified as a crypto wallet drainer designed to siphon cryptocurrency from unsuspecting users through malicious smart contract interactions. Analysis indicates the domain hosted a fraudulent web interface mimicking legitimate crypto wallet services, likely using social engineering tactics such as fake airdrops or token swaps to trick victims into connecting their wallets. The infrastructure was engineered to execute unauthorized transactions, transferring assets to attacker-controlled addresses without user consent. Despite the current 404 error page, historical data confirms active malicious use prior to takedown. Evidence supporting this assessment includes detection by 10 out of 95 security vendors on VirusTotal, with the domain appearing on three distinct security blocklists, including PhishDestroy, PhishingArmy, and OISD. The domain was registered on April 28, 2026, through GoDaddy.com, LLC, an atypical creation date suggesting potential domain spoofing or misuse of a legitimate registration service. Infrastructure analysis reveals the domain resolved to IP address 34.144.206.118, hosted on Google Cloud, and employed technologies such as React, Lodash, and HSTS, which are commonly leveraged to enhance phishing site credibility and evade detection. Users who visited starts-ledgrlive.wixstudio.com or interacted with any content hosted on this domain should immediately revoke any wallet connections made during the visit. Audit all connected wallet permissions and review transaction histories for unauthorized transfers. If assets were transferred, report the incident to relevant blockchain explorers and law enforcement, providing transaction hashes as evidence. Clear browser cache and cookies to remove any residual tracking scripts, and monitor accounts for unusual activity. Given the high-risk nature of this domain, affected users are advised to consider migrating assets to a new wallet if compromise is confirmed.