ledgliveus[.]wixstudio[.]com

This domain, ledgliveus.wixstudio.com, was identified as a brand impersonation threat designed to deceive users of Ledger, a well-known cryptocurrency hardware wallet provider. The site likely aimed to trick visitors into entering sensitive information, such as recovery phrases or private keys, under the false pretense of managing or securing their crypto assets. Such tactics are commonly used to facilitate unauthorized access to wallets, leading to potential financial losses for victims. Analysis indicates the domain was hosted on infrastructure associated with Wix Studio, resolving to the IP address 34.144.206.118. It was flagged by 4 out of 95 security vendors on VirusTotal, and appeared on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. The domain was registered through GoDaddy.com, LLC, and employed a Let's Encrypt SSL certificate, which, while providing encryption, does not validate the legitimacy of the site. Additional technical indicators include the use of Wix, React, Google Cloud, and Google Cloud CDN, alongside HTTP/3 for content delivery. The page title, '404 Error: Page Not Found | Wix Studio,' suggests the site may have been hastily taken down or moved, a common tactic to evade detection. Users who visited ledgliveus.wixstudio.com should assume their interactions may have been compromised. If any sensitive information, such as wallet credentials or recovery phrases, was entered, immediate action is required. Affected individuals should transfer any remaining assets to a new, secure wallet and revoke access to any connected applications or services. Additionally, monitoring for unauthorized transactions and enabling multi-factor authentication on all crypto-related accounts is strongly advised. Given the elevated risk level, users should remain vigilant for follow-up phishing attempts via email or other communication channels.