apps-ladgar-cd[.]wixstudio[.]com

PhishDestroy has flagged apps-ladgar-cd.wixstudio.com as an active brand impersonation domain designed for credential theft. This WixStudio-hosted page mimics legitimate services to deceive users into surrendering private keys, crypto wallet logins, or personal data. Analysis confirms the domain resolves to Google Cloud IP 34.144.206.118 and leverages a Let's Encrypt SSL certificate to appear trustworthy. Active takedown efforts are underway as the threat remains unblocked by most security vendors. This domain was assigned a low confidence risk level during initial triage due to its low VirusTotal detection rate of 1/95 antivirus engines. While this may suggest limited deployment in live campaigns, it also highlights the domain’s capacity to evade early-stage detection mechanisms. VirusTotal’s absence of flags should not be interpreted as a clean bill of health—especially given the domain’s use of a recently issued Let’s Encrypt certificate and hosting on a reputable cloud provider. Such configurations are increasingly favored by threat actors to bypass network filters and build trust with potential victims. Users who visited apps-ladgar-cd.wixstudio.com are advised to immediately disconnect from the internet, scan all connected devices for malware, and revoke any credentials entered on the site. Do not approve cryptocurrency transactions or sign blockchain transactions from wallets connected to this domain. Report the incident to your IT team or security provider and monitor wallet addresses for unauthorized transfers. If you provided a seed phrase or private key, consider migrating all assets to a new wallet and enabling hardware wallet protections. Stay vigilant—this domain represents a growing trend in brand impersonation phishing targeting digital asset users.