startedapp-legercdn[.]wixstudio[.]com

PhishDestroy identifies startedapp-legercdn.wixstudio.com as an active crypto drainer infrastructure posing under active investigation status. This WixStudio-hosted subdomain is suspected of facilitating cryptocurrency fund theft through deceptive transaction interception methods. The threat remains active as of current monitoring cycles, with no resolution timeline established by security vendors.

This domain resolves to IP address 34.144.206.118 and is secured with a Let's Encrypt SSL certificate. VirusTotal analysis indicates 4 of 95 security vendors currently flag this domain, despite active phishing investigation status. The infrastructure operates under WixStudio's CDN domain pattern (wixstudio.com) which may provide cover for malicious operations. The domain's recent deployment timing suggests opportunistic targeting of cryptocurrency users.

Given the active investigation status and zero vendor detections, this domain represents a high-risk cryptocurrency threat. Immediate action includes network-level blocking of domain and IP address. Users should verify all cryptocurrency transaction addresses through multiple trusted sources before fund transfers. Organizations should deploy DNS filtering rules blocking wixstudio.com subdomains that contain suspicious keywords like 'startedapp' or 'legercdn'. Continuous monitoring for similar patterns in crypto-related communications is strongly recommended.