ledgr-com[.]wixstudio[.]com

PhishDestroy identifies ledgr-com.wixstudio.com as an active crypto drainer deployed on the WixStudio platform, masquerading as a legitimate authentication portal. This elevated-risk domain employs social engineering tactics to trick users into entering wallet credentials, granting threat actors direct access to digital assets. The attack vector relies on users unknowingly submitting private keys or seed phrases into a fraudulent interface, which are then harvested and drained to external wallets controlled by attackers. Technical analysis confirms the domain resolves to IP 34.144.206.118, while its SSL certificate issued by Let’s Encrypt adds superficial legitimacy to deceive detection mechanisms.

This domain has been flagged by 10 out of 95 security vendors on VirusTotal, indicating elevated risk exposure across multiple detection engines. The infrastructure is hosted on Google Cloud (ASN 15169), a common platform for short-lived malicious sites due to its scalability and anonymity. WHOIS records indicate the domain was created recently, leveraging newly registered infrastructure to evade historical blocklists. It has already been listed on multiple threat intelligence feeds, including PhishDestroy’s active monitoring system, reinforcing its status as a confirmed malicious actor.

If you visited ledgr-com.wixstudio.com, immediately disconnect from the site, revoke any permissions granted to connected wallets, and transfer remaining funds to a new, secure wallet. Do not interact further with the domain. Scan all connected devices for malware using reputable antivirus tools, as crypto drainers often bundle infostealers. Report the incident on PhishDestroy to help protect the community. Always verify URLs and use hardware wallets or official app stores for transactions to prevent credential theft.