nexledger[.]wixstudio[.]com

This domain, nexledger.wixstudio.com, was created on 17 December 2016 and is hosted through the Wix Studio registration service. VirusTotal records show that 14 of 91 security vendors have flagged the domain, indicating a measurable level of malicious detection. The domain appears on a single public blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a malicious crypto‑drainer infrastructure. No public evidence has been published regarding the underlying hosting IP, SSL certificate details, HTTP response codes, or Safe Browsing verdicts, and page‑title information is not currently available.

Consequently, the full scope of the campaign’s payload delivery mechanisms remains uncertain. Analysts should treat any traffic to or from nexledger.wixstudio.com as hostile and incorporate the domain into blocklists, firewall deny rules, and DNS sinkhole configurations. Continuous monitoring of the domain’s reputation on VirusTotal and other threat‑intel platforms is advised, as additional detections may emerge.

Organizations that handle cryptocurrency wallets or exchange services should be especially vigilant for outbound connections to this domain, as it is associated with attempts to siphon digital assets. Updating endpoint protection signatures to include the 14 vendor detections will improve detection capability. Defensive teams are encouraged to share any new indicators of compromise related to this domain with the broader security community to accelerate mitigation efforts.