live-ledghelp[.]wixstudio[.]com

PhishDestroy has identified live-ledghelp.wixstudio.com as a malicious domain designed to trick visitors into believing it is an official Ledger support page. This type of phishing attack, known as credential harvesting, aims to steal sensitive information such as login credentials or cryptocurrency wallet recovery phrases. The site was hosted on Wix Studio but has since been taken offline, though the risk to users who may have visited it remains.

Our investigation reveals that the domain was registered through GoDaddy.com, LLC and currently resolves to the IP address 34.144.206.118. VirusTotal analysis shows that 3 out of 95 security vendors flagged this domain as malicious, indicating a moderate level of consensus among security tools. The page title displayed a generic 404 error, which may have been a default response after the site was removed. Additionally, the domain appears on one security blocklist, further confirming its malicious intent.

If you have visited this site, it is crucial to take immediate action. Change any passwords or recovery phrases that may have been entered on the page, and enable two-factor authentication on your accounts. Monitor your cryptocurrency wallets and financial accounts for unauthorized activity. If you suspect your information has been compromised, contact the official support channels for the service you believe was being impersonated. Always verify URLs carefully before entering sensitive data, and rely on trusted sources for customer support.