en-liveladger[.]wixstudio[.]com

PhishDestroy identifies en-liveladger.wixstudio.com as a recently active phishing domain masquerading as the official Live Ledger platform. This domain leverages the WixStudio platform to host a generic phishing page designed to harvest sensitive credentials, likely targeting cryptocurrency wallet users. The infrastructure suggests a low-cost, high-reach campaign aimed at unsuspecting victims through deceptive domain similarity and legitimate hosting services. en-liveladger.wixstudio.com exhibits the following technical indicators: a VirusTotal detection ratio of 2 out of 95 security vendors, indicating a fledgling or highly targeted campaign. The domain resolves to IP address 34.144.206.118, which is associated with a Let's Encrypt SSL certificate—further enhancing its authenticity to potential victims. The domain was registered under Wix.com’s hosting infrastructure, though specific creation date and registrar details remain undisclosed at this stage. Google Safe Browsing (GSB) has not yet flagged the domain, and no current blocklist entries have been recorded. These factors collectively suggest an early-stage phishing operation with minimal prior exposure. As of this advisory, the domain remains active and under investigation, with no active takedowns or blocks in place. PhishDestroy recommends immediate network and endpoint blocking of the domain and associated IP address to mitigate potential compromise. Users should exercise heightened caution when encountering Live Ledger-related domains, particularly those hosted on third-party platforms like WixStudio. The residual risk remains high due to the lack of detections and absence of proactive blocking measures. Organizations are advised to update threat intelligence feeds and firewall rules to include this indicator while monitoring for further developments.