com-ledgestarted[.]wixstudio[.]com

PhishDestroy identifies com-ledgestarted.wixstudio.com as an active crypto drainer, currently under investigation for phishing activity targeting cryptocurrency holders. This domain is hosted on Wix’s platform and employs deceptive tactics to trick users into connecting their wallets or revealing private keys. The threat remains active and is being monitored for further intelligence gathering.

This domain resolves to IPv4 address 34.144.206.118 and operates under a Let's Encrypt SSL certificate, adding a false sense of legitimacy. VirusTotal currently shows 0 detections out of 95 vendor engines, indicating it has evaded immediate detection. Registered through Wix, the domain’s details remain sparse, with no publicly available creation date or registrar information. It is not currently listed on major blocklists and maintains neutral trust scores across evaluated platforms. The absence of detections suggests either a newly deployed campaign or a sophisticated evasion strategy.

Users are strongly advised to avoid interacting with com-ledgestarted.wixstudio.com and to verify its status through PhishDestroy before engaging with any linked content. Until the investigation concludes, treat this domain as a high-risk crypto drainer. If exposure occurs, disconnect wallets immediately, revoke any unauthorized permissions, and run a security scan. Report this domain to PhishDestroy to aid in threat mitigation.