officialplat-liv[.]wixstudio[.]com

This domain is classified as an elevated-risk brand impersonation threat specifically targeting Ledger, a cryptocurrency hardware wallet provider. The site mimics the Ledger Live interface, a platform used for managing crypto assets, to deceive users into disclosing sensitive credentials or installing malicious software. Analysis indicates the threat type aligns with credential harvesting and potential malware distribution, common objectives in cryptocurrency-related phishing campaigns. Infrastructure analysis reveals the domain officialplat-liv.wixstudio.com was registered through GoDaddy.com, LLC on December 17, 2016, though the subdomain itself appears to have been weaponized recently. The domain resolves to the IP address 34.144.206.118, which may be part of a larger hosting infrastructure used for malicious activities. Detection metrics show 15 out of 95 security vendors on VirusTotal flagged this domain as malicious, while it also appears on at least one security blocklist. The page title, 'Ledger Live - officialplatforms.Wix.xom,' contains a typographical error ('Wix.xom'), a common tactic to evade automated detection while maintaining visual similarity to legitimate services. To mitigate risks associated with this brand impersonation threat, users should verify the authenticity of any Ledger-related domain by cross-referencing it with official sources listed on the Ledger website. Enabling multi-factor authentication (MFA) on all cryptocurrency accounts and using hardware-based security keys can reduce the impact of credential theft. Organizations should update their email and web filtering rules to block known malicious domains and IPs, such as 34.144.206.118, and monitor for unusual login attempts or transaction requests. End-users are advised to report suspicious domains to threat intelligence platforms to improve collective defense mechanisms.