enusdesktop[.]wixstudio[.]com
“Ledger Live Desktop® — Starting Up Your Device | Ledger®®”
Osservazione memorizzata
Contrasto dei titoli osservato
Riepilogo delle prove
This domain, enusdesktop.wixstudio.com, is identified as a high-risk phishing resource designed to impersonate Ledger, a cryptocurrency hardware wallet provider. The page mimics the official Ledger Live Desktop interface, displaying the title 'Ledger Live Desktop® — Starting Up Your Device | Ledger®®' to deceive users into believing they are interacting with legitimate software. The objective of this campaign appears to be credential harvesting or the distribution of malicious payloads under the guise of wallet initialization, exploiting trust in the Ledger brand to compromise sensitive financial data or cryptocurrency assets.
Analysis indicates that enusdesktop.wixstudio.com is flagged by 16 out of 95 security vendors on VirusTotal, a significant detection rate that underscores its malicious nature. The domain was registered through GoDaddy.com, LLC, and resolves to the IP address 34.144.206.118, hosted on Google Cloud infrastructure. Infrastructure analysis reveals the use of Wix, React, and Google Cloud CDN, alongside HTTP/3 and HSTS protocols, which may be leveraged to lend an air of legitimacy to the phishing site. The domain was created on April 20, 2026, though this timestamp may reflect backdating or administrative manipulation. Currently, the domain appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD, and has been taken offline, though residual risks may persist.
Users who visited enusdesktop.wixstudio.com or interacted with its content are advised to take immediate remedial actions. Any credentials, recovery phrases, or private keys entered on the site should be considered compromised and revoked immediately. Affected users should transfer cryptocurrency assets to new wallets using uncontaminated devices and monitor accounts for unauthorized transactions. System scans for malware or unauthorized software installations are recommended, particularly if files were downloaded from the domain. Additionally, users should verify the authenticity of any Ledger-related communications and avoid clicking on unsolicited links, even if they appear to originate from trusted sources.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
-
VirusTotal
8 → 16
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Registration: wixstudio.com
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain wixstudio.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie
7 tecnologie identificate con alta affidabilità
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of enusdesktop.wixstudio.com · checked Jun 26, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo