live-ledggr[.]wixstudio[.]com

PhishDestroy identifies live-ledggr.wixstudio.com as a fraudulent site impersonating the Ledger hardware wallet platform to steal cryptocurrency credentials. This Wix-hosted page mimics the official Ledger login portal, using social-engineering tactics to trick visitors into entering their recovery phrases or private keys under the guise of a 'security check' or 'account update'. Once credentials are harvested, attackers immediately drain associated wallets, often transferring funds to high-risk exchanges or tumblers to obfuscate the flow. This type of phishing is particularly dangerous because victims may not realize they’ve been compromised until it’s too late — funds are moved within minutes of credential submission. This domain was flagged during routine monitoring after being observed in a Telegram scam campaign targeting Ledger users. VirusTotal currently shows 5 out of 95 detection engines flagging it, indicating a low initial detection rate despite clear malicious intent. The domain resolves to IP address 34.144.206.118, hosted on Google Cloud, and uses a valid Let’s Encrypt SSL certificate to appear legitimate. While WixStudio domains are typically benign, threat actors frequently abuse reputable hosting platforms to evade early detection. The lack of detections suggests this phishing page is either very new or employs evasion techniques to bypass initial scans. If you visited live-ledggr.wixstudio.com, immediately disconnect from the internet and check any wallets or accounts you may have entered credentials into. Do not reuse passwords or recovery phrases across services. Scan your device for malware using a trusted antivirus tool, as some phishing kits also deploy info-stealers. Report the domain to your wallet provider and consider transferring remaining funds to a new, secure wallet with a fresh recovery phrase. Avoid clicking any links in unsolicited messages, even those appearing to come from Ledger or other crypto services. Always verify URLs by typing them manually into your browser or using official Ledger communication channels.