homepages-ledgrdcom[.]wixstudio[.]com

PhishDestroy identifies homepages-ledgrdcom.wixstudio.com as a live crypto drainer actively impersonating Ledger hardware wallets to steal cryptocurrency. This Wix-hosted page leverages a Let’s Encrypt SSL certificate (34.144.206.118) to appear legitimate while serving malicious scripts designed to drain connected wallets. The domain was automatically flagged due to suspicious behavior patterns despite the absence of antivirus detections at the time of analysis. This domain resolves to IP 34.144.206.118 and currently shows zero detections on VirusTotal out of 95 scanning engines, indicating it remains under the radar of most security vendors. While the SSL certificate suggests basic encryption, it does not validate legitimacy—especially when paired with the generic WixStudio subdomain structure. The lack of blocklist entries suggests this is a newly deployed infrastructure, likely part of a fast-moving campaign targeting cryptocurrency users through impersonation of trusted brands like Ledger. Users who visited homepages-ledgrdcom.wixstudio.com should immediately disconnect any connected hardware wallets or browser extensions, clear browser cache and cookies, and scan devices with updated antivirus software. Do not enter any seed phrases, private keys, or wallet credentials on this page. Report the domain to PhishDestroy via the verification portal and consider revoking any wallet access permissions granted to suspicious sites. Monitor blockchain transactions for unauthorized transfers and report theft to relevant authorities.