# ladger-live-us.wixstudio.com — SUSPICIOUS

> PhishDestroy identifies ladger-live-us.wixstudio.com as a Ledger wallet phishing site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies ladger-live-us.wixstudio.com as a fraudulent domain actively impersonating Ledger’s official wallet service. This WixStudio-hosted site (34.144.206.118) leverages a spoofed branding strategy to deceive users into entering sensitive recovery phrases or private keys, posing a direct threat to cryptocurrency assets. The domain’s SSL certificate, issued by Let’s Encrypt, lends it a false veneer of legitimacy, while its mimicry of Ledger’s interface aims to exploit user trust in hardware wallet ecosystems. Technical analysis confirms this is a classic crypto wallet phishing campaign, designed to harvest credentials under the guise of a legitimate service.  This domain was flagged by PhishDestroy with critical indicators: VirusTotal currently shows 0/95 security engines detecting the threat, indicating a low initial detection rate despite active impersonation tactics. The domain resolves to IP 34.144.206.118, a Google Cloud-hosted address commonly abused for short-lived phishing operations. While the exact creation date is not publicly disclosed, the use of a WixStudio subdomain suggests recent deployment, a common tactic among fraudsters to rapidly cycle infrastructure. The lack of blocklist entries (0 detections) highlights a lag in threat intelligence coverage, increasing the risk of user exposure.  Users who visited ladger-live-us.wixstudio.com should immediately cease any interaction with the site and revoke any credentials entered. Ledger users are strongly advised to cross-check all URLs using official channels (e.g., ledger.com) and enable multi-factor authentication (2FA) on their accounts. If recovery phrases or private keys were entered, transfer all assets to a new wallet immediately and monitor accounts for unauthorized transactions. Report the domain to Ledger’s abuse team and consider running a malware scan on devices used to access the site. PhishDestroy recommends blocking 34.144.206.118 at the network level to prevent further access.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 34.144.206.118

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/ladger-live-us.wixstudio.com
- PhishDestroy: https://phishdestroy.io/domain/ladger-live-us.wixstudio.com/
- LLM endpoint: https://phishdestroy.io/domain/ladger-live-us.wixstudio.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ladger-live-us.wixstudio.com/
Last updated: 2026-04-04