startedledgercdn[.]wixstudio[.]com

This domain, startedledgercdn.wixstudio.com, is currently classified as an active crypto‑drainer with an elevated risk rating. The domain was created on 17 December 2016 and the registration is listed under Wix Studio, a legitimate website‑builder service. Despite the benign registrar, security telemetry shows malicious use: VirusTotal has recorded detections from 15 of 91 scanning engines, indicating that a notable subset of vendors identify malicious payloads or command‑and‑control activity associated with the host. The domain also appears on one external blocklist and has been explicitly blocked by the PhishDestroy filtering service, reinforcing the view that it is being used for abusive purposes.

The crypto‑drainer classification suggests that the site is employed to siphon cryptocurrency assets, typically by luring victims into transferring funds to attacker‑controlled wallets. No public indicators such as the page title, SSL certificate details, or HTTP response codes have been released in the intelligence feed, so the exact delivery mechanism remains unknown. Likewise, IP address, hosting provider, or geographic attribution have not been disclosed, limiting the ability to map the full infrastructure. Defenders should prioritize blocking any outbound requests to this host at the network perimeter and add the domain to local deny lists.

Endpoint protection solutions that incorporate the VirusTotal detection count can flag the domain for quarantine or alert generation. Continuous monitoring of the host’s resolution patterns and any future VirusTotal updates is recommended, as additional detections may surface. Because the registration is tied to a commercial platform, contacting Wix Studio’s abuse team may help accelerate takedown or remediation actions.