ledgrocom-startapps[.]wixstudio[.]com

PhishDestroy identifies active crypto drainer activity on ledgrocom-startapps.wixstudio.com, impersonating Ledger Live. The domain is currently under investigation with a status marked as active. This threat involves a fake login portal designed to steal cryptocurrency wallet credentials and initiate unauthorized transfers.

This domain resolves to IP address 34.144.206.118 and operates under a Let's Encrypt SSL certificate. VirusTotal analysis shows 0 detections out of 95 vendors, indicating it remains undetected by most security solutions. The domain was created recently and is hosted on WixStudio's platform, which may be leveraged for rapid deployment and evasion of traditional blocklists. Further investigation into registrar details, creation date, and blocklist inclusion status is ongoing.

The current status of ledgrocom-startapps.wixstudio.com remains active, with no detections reported by major threat intelligence vendors. Users are strongly advised to avoid interacting with this domain or any linked pages. For verification, utilize PhishDestroy's real-time threat lookup to confirm legitimacy before entering credentials or downloading files. Organizations should consider blocking the IP address 34.144.206.118 at the network perimeter and updating endpoint protection rules to include this domain as a known threat. Immediate reporting of any observed activity to PhishDestroy or relevant cybersecurity teams is recommended to aid in containment and mitigation efforts.