open-ledgrlive-en[.]wixstudio[.]com

This domain, open-ledgrlive-en.wixstudio.com, is flagged as a generic phishing site targeting users of the Ledger Live cryptocurrency wallet. Analysis indicates the infrastructure mimics legitimate wallet services to harvest login credentials, seed phrases, or private keys. The domain appears to use a Wix Studio subdomain, a common tactic to evade detection by leveraging reputable hosting providers. No evidence of a drainer kit has been identified yet, but the site’s structure aligns with credential-harvesting phishing campaigns. Infrastructure analysis reveals the domain resolves to IP address 34.144.206.118, hosted on Google LLC’s AS396982 in the United States. The registrar is GoDaddy.com, LLC, though no domain creation date is publicly available. VirusTotal reports 0 detections out of 95 security engines, suggesting the site is newly deployed or employs evasion techniques. The domain appears on one security blocklist and is currently unblocked by Google Safe Browsing. No SSL certificate is present, increasing the risk of man-in-the-middle interception during credential submission. The site remains active as of this assessment, with no takedown or suspension observed. Response actions should include immediate reporting to the hosting provider (Wix Studio) and registrar for abuse mitigation. Users are advised to verify domain authenticity via official Ledger channels and avoid entering sensitive information. The lack of SSL and minimal blocklist coverage indicate a low-detection risk, requiring heightened vigilance from cryptocurrency users and security teams.