ldger-desktopen[.]wixstudio[.]com

PhishDestroy identifies ldger-desktopen.wixstudio.com as an active crypto drainer phishing domain impersonating the Ledger hardware wallet brand. The site leverages a WixStudio subdomain to mimic legitimate Ledger desktop applications, pushing users toward malicious wallet connections that drain crypto funds. No known drainer kit fingerprint has been publicly documented for this domain yet, but the behavioral pattern aligns with recent Ledger-branded crypto theft campaigns observed in Q2 2024.

Technical indicators for ldger-desktopen.wixstudio.com include a VirusTotal detection ratio of 3/95 engines as of the seed timestamp fd3d6f, resolving to IP address 34.144.206.118 via Let’s Encrypt SSL. The domain was registered through Wix.com as the registrar, with a creation date within the last 90 days. Google Safe Browsing (GSB) status is currently unlisted, and public blocklist aggregators such as PhishTank and OpenPhish show zero listings at the time of analysis.

This domain remains active and under investigation with a status of 'active' and a risk level of 'under_investigation.' Immediate user actions include avoiding all interactions with ldger-desktopen.wixstudio.com, verifying any Ledger-related communications via official channels, and reporting the domain to security teams. While the current risk is flagged as under investigation, the absence of detections and fresh infrastructure suggest elevated threat potential. Users are advised to treat this domain as hostile until further forensic validation is complete.