home-ledgre[.]wixstudio[.]com

PhishDestroy identifies the active phishing campaign hosted at home-ledgre.wixstudio.com as a crypto wallet drainer kit targeting cryptocurrency users. The domain is not branded after a specific company but mimics legitimate wallet service pages to deceive victims into entering their private keys or seed phrases. This drainer kit is designed to silently transfer cryptocurrency assets from victim wallets to attacker-controlled addresses, leveraging social engineering tactics to bypass security awareness. The domain is hosted on Wix’s platform under the WixStudio subdomain, which may lend an initial appearance of legitimacy but is frequently abused for phishing due to easy deployment and low detection rates.

Technical indicators confirm elevated risk despite low static detection. VirusTotal currently shows 0 detections out of 95 security engines (1/95), indicating the domain remains undetected by most antivirus solutions as of seed 079f4c. The domain was registered through Wix’s domain services and resolves to the IP address 34.144.206.118. The SSL certificate is issued by Let's Encrypt, a trusted provider often exploited in phishing due to free issuance and widespread trust chains. Google Safe Browsing (GSB) status is currently unflagged, and cross-referencing blocklists reveals no known public blocklist entries, increasing the risk of exposure to unprotected users.

This domain is actively engaged in malicious activity and remains accessible as of investigation time. Immediate containment actions include network blocking of IP 34.144.206.118 and domain-level blocking of home-ledgre.wixstudio.com across security platforms. Users are advised to avoid accessing the domain and report any interaction to their IT security team. Remaining risk is high due to zero detection, lack of blocklist presence, and the domain’s active operation. Proactive monitoring and updated threat intelligence feeds are essential to prevent compromise. All cryptocurrency users should verify URLs via official channels and use hardware wallets or verified extensions for enhanced security.