ledgrlivd-starte[.]wixstudio[.]com

PhishDestroy identifies active cryptocurrency drainer hosted at ledgrlivd-starte.wixstudio.com mimicking the official Ledger Live login portal to steal wallet seed phrases and private keys. Attackers lure victims through phishing emails or social media links that mislead users into entering recovery phrases or wallet passwords on a counterfeit login page. Once credentials are captured, the drainer immediately transfers crypto assets from the victim’s wallet to attacker-controlled addresses, often within minutes of data submission. This domain was flagged under seed e2b5a8 for active credential harvesting and transaction redirection. This domain resolves to IP 34.144.206.118 and uses a Let's Encrypt SSL certificate to appear legitimate. VirusTotal currently shows 0 detections out of 95 engines, indicating recent emergence and low signature coverage in antivirus databases. The domain is registered via Wix, with creation date still under investigation as of latest scan. Despite the lack of detections, the domain exhibits high-risk behavior consistent with crypto drainer infrastructure: rapid domain rotation, hosting on shared cloud platforms, and impersonation of a major hardware wallet brand (Ledger). Blocklist count remains at zero due to its novelty, increasing the danger to early victims. Users who have visited ledgrlivd-starte.wixstudio.com or entered any credentials are urged to immediately disconnect from the internet, transfer remaining funds to a new wallet using only verified software, and revoke any session tokens or browser permissions granted to the site. Scan your device with reputable antivirus tools and rotate all wallet passwords and seed phrases offline using trusted tools. Report the incident to Ledger support and file a complaint with your local cybercrime unit. For real-time verification of similar domains, use PhishDestroy’s domain lookup tool to cross-reference against known crypto drainer IOCs.