getlive-dsktop[.]wixstudio[.]com

This domain, getlive-dsktop.wixstudio.com, represents a targeted brand impersonation campaign designed to deceive users into believing they are accessing the legitimate Ledger Live desktop application. Analysis indicates the page mimics the official Ledger Live onboarding process, using the title 'Ledger® Live: Desktop® — Getting Started | official Ledger™' to establish false credibility. The site likely harvests cryptocurrency wallet credentials, recovery phrases, or installs malicious payloads under the guise of software installation. Such attacks pose significant financial risk to users of hardware wallet ecosystems. Infrastructure analysis reveals the domain was hosted on Wix Studio infrastructure and resolved to the IP address 34.144.206.118, a Google Cloud endpoint. Detection metrics show 6 out of 95 security vendors flagged the domain as malicious on VirusTotal, while it appears on one security blocklist. The domain was registered through GoDaddy.com, LLC, and secured with a Let's Encrypt SSL certificate, which, while providing encryption, does not validate legitimacy. Additional technologies detected include React, Lodash, HSTS, and Google Cloud CDN, suggesting a sophisticated frontend designed to evade basic detection mechanisms. Users who visited getlive-dsktop.wixstudio.com should immediately revoke any credentials or recovery phrases entered on the site. All connected devices should undergo malware scans using updated security tools, with particular attention to browser extensions or downloaded files. Cryptocurrency wallet users are advised to transfer assets to new, secure wallets and enable multi-factor authentication where available. Monitoring for unauthorized transactions is critical, and any suspicious activity should be reported to relevant financial or cybersecurity authorities. The domain has since been taken offline, but similar threats may persist under different addresses.