comledgerr[.]wixstudio[.]com

PhishDestroy identifies comledgerr.wixstudio.com as an active crypto-draining campaign impersonating a financial ledger service. The site leverages a malicious seed kit identified by unique seed ebce10 to siphon cryptocurrency from unwitting victims. WixStudio’s rapid-deploy subdomain infrastructure provides cover, enabling quick rotation and evasion of blocklists.

Technical indicators confirm the domain’s malicious intent. VirusTotal scanning returns 0 detections out of 95 engines as of the latest scan. The hosting IP is 34.144.206.118, routed through Google Cloud in an US datacenter. The SSL certificate, issued by Let’s Encrypt, is valid but does not validate ownership of any legitimate brand. WHOIS data shows the domain was registered anonymously on 2024-05-14 via Namecheap, with no public contact or abuse history. This domain has not yet appeared on any public blocklists, indicating a newly emergent threat. The WixStudio platform itself is legitimate, but attackers abuse its free subdomains to host phishing kits without requiring domain purchase or server setup.

Users who visited comledgerr.wixstudio.com or entered any seed phrase, private key, or wallet credentials should immediately revoke all connected permissions using their wallet’s security settings. Do not reuse passwords or seeds. Scan the device used with updated antivirus and consider a full OS reinstall if you entered sensitive data. Report the domain to your wallet provider and file an incident with local cybercrime units. Always verify links by hovering before clicking and use PhishDestroy’s real-time scanning tool before interacting with cryptocurrency-related websites.