desktop-ldgrexcdn[.]wixstudio[.]com
“Ledger Live Desktop® — Starting Up Your Device | Ledger®”
Stored observation
Observed title contrast
Evidence Summary
desktop-ldgrexcdn.wixstudio.com was observed on July 16, 2026 as part of a generic_phishing campaign under investigation. The domain resolves to the IPv4 address 34.144.206.118. DNS queries return no identifiable nameserver information (NS_NOT_FOUND), suggesting the authoritative servers are either hidden or not publicly resolvable. The domain was submitted to VirusTotal where 91 antivirus and scanning engines inspected the host; none reported a detection at the time of analysis, though the absence of detections does not constitute a safety assurance. Current intelligence indicates the domain remains active. No additional infrastructure details, such as registrar or ASN, are available, and the content of the hosted site has not been examined. Defenders should consider adding the domain to blocklists, monitoring DNS traffic for queries to the associated IP, and employing sinkholing or outbound filtering to mitigate potential credential harvesting. Continuous re‑evaluation is advised as further evidence may emerge.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 12, 2026
10 monitored external feeds No match
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Registration: wixstudio.com
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For the registrable domain wixstudio.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Site Configuration Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive