iostarts-ldgercdn[.]wixstudio[.]com

This domain has been assessed as an elevated risk due to its classification as a generic phishing threat, specifically designed to target cryptocurrency users by impersonating the Ledger brand. Such sites typically attempt to steal login credentials or trick users into connecting their wallets, resulting in asset theft. The risk level is elevated because while the domain is currently offline, its infrastructure and registration details suggest a high potential for harm if it were active.

VirusTotal analysis shows that 10 out of 95 security vendors flagged this domain as malicious, indicating broad consensus among security tools. The domain was registered on June 15, 2026, through GoDaddy.com, LLC, a popular registrar often abused by threat actors. It resolves to IP address 34.144.206.118, which is associated with Google Cloud hosting. The SSL certificate was issued by Let's Encrypt (R13), a free certificate authority frequently used for phishing sites. The domain appears on one security blocklist, and its current status is offline, though it could be reactivated. These technical indicators collectively point to a well-structured phishing operation.

Users who may have interacted with this domain should take immediate action. If any credentials or seed phrases were entered, assume they are compromised and transfer funds to a new wallet immediately. Enable two-factor authentication on all related accounts. To avoid future threats, always verify the official URL of cryptocurrency services by bookmarking them directly. Use PhishDestroy to check any suspicious links before clicking. If you have connected a wallet to this site, revoke permissions via a blockchain explorer or wallet interface to prevent future draining.