nav-ledgr-live[.]wixstudio[.]com

This domain, nav-ledgr-live.wixstudio.com, operates as a credential harvesting platform targeting users of the Ledger cryptocurrency wallet. The site mimics the official Ledger Live login interface, presenting a page titled 'Ledger Live: Login® | Start Your Crypto Journey | Ledger®' to deceive visitors into entering sensitive wallet credentials, recovery phrases, or private keys. Given the irreversible nature of cryptocurrency transactions, compromised credentials could lead to immediate and permanent asset loss, making this a high-severity threat to both individual and institutional users. Analysis indicates the domain was constructed using Wix Studio infrastructure and is hosted on Google Cloud, resolving to the IP address 34.144.206.118. The site employs a Let's Encrypt SSL certificate to create a false sense of legitimacy, while its underlying technologies include React, Google Cloud CDN, and HTTP/3. The domain is registered through GoDaddy.com, LLC, though no creation date is publicly disclosed. Detection metrics confirm its malicious nature, with 11 out of 95 security vendors on VirusTotal flagging the domain as phishing. Additionally, the domain appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD, further validating its classification as a confirmed phishing resource. Users who have visited nav-ledgr-live.wixstudio.com or entered credentials on the site should assume their information has been compromised. Immediate action is required: revoke any active sessions, transfer assets to a new wallet with a fresh recovery phrase, and monitor all linked accounts for unauthorized transactions. Enable multi-factor authentication where available and report the incident to relevant security teams or fraud reporting platforms. Due to the domain's current offline status, further interaction is unlikely, but vigilance is advised for similar impersonation attempts using comparable infrastructure or branding.