eng-ldgrlive-support[.]wixstudio[.]com

The domain eng-ldgrlive-support.wixstudio.com is flagged for brand impersonation, specifically targeting the cryptocurrency hardware wallet company Ledger. No specific crypto drainer kit has been identified, but the domain has been used to mimic the official Ledger Live support page, potentially to deceive users into divulging sensitive information or performing actions that could compromise their accounts.

Infrastructure analysis reveals that the domain resolves to the IP address 34.144.206.118. The domain was registered through GoDaddy.com, LLC. The SSL certificate is issued by Let's Encrypt, a common choice for legitimate and malicious sites alike. According to VirusTotal, 4 out of 95 security vendors flag this domain as malicious. The domain appears on 3 security blocklists, including PhishDestroy, PhishingArmy, and OISD, indicating a consensus among security researchers about its malicious nature. The creation date of the domain is not provided, but it has been active long enough to be detected and blocked by multiple sources.

The domain is currently offline, which suggests that it has been taken down either by security measures or by the registrar. Despite this, the risk remains elevated as the domain could be reactivated or repurposed. Users are advised to avoid interacting with any similar domains and to verify the authenticity of support pages by accessing them directly from official Ledger sources. Security teams should continue monitoring for any signs of reactivation and consider adding this domain to their blocklists to prevent potential future phishing attempts.