startd-ledggr-com[.]wixstudio[.]com

PhishDestroy identifies startd-ledggr-com.wixstudio.com as an active generic phishing domain impersonating Ledger wallet services to deploy cryptocurrency drainer kits. The site is hosted on WixStudio's subdomain infrastructure, leveraging the platform's legitimate appearance to deceive users into connecting malicious wallet drainers. Security teams should prioritize blocking this domain due to its active threat status and potential to siphon digital assets from unsuspecting victims.

This domain resolves to IP address 34.144.206.118 and currently shows 3 out of 95 detections on VirusTotal, indicating it remains undetected by most antivirus engines as of the latest scan. The SSL certificate is issued by Let's Encrypt, providing a false sense of security with valid encryption. The unique seed ade711 confirms this as a newly identified threat vector. While the exact creation date and registrar details are not disclosed in available intelligence, the domain's active status and lack of detections suggest it is a recently deployed attack infrastructure.

The current risk level is classified as under_investigation, with active status meaning the threat is ongoing and potentially spreading. Users should immediately block the domain startd-ledggr-com.wixstudio.com and avoid accessing it, as it poses a significant risk to cryptocurrency wallet security. Security researchers are urged to monitor this domain closely, given its low detection rate and potential for rapid evolution. Remaining risk includes the possibility of the drainer kit being updated to evade detection, highlighting the need for continuous monitoring and proactive blocking in security systems.