en-desktop-lives[.]wixstudio[.]com

The domain en-desktop-lives.wixstudio.com has been identified as a high-risk phishing site specializing in brand impersonation. Analysis confirms the target as Ledger, a cryptocurrency hardware wallet provider. The site is currently offline, though prior activity involved presenting a fraudulent version of the Ledger Live Desktop application interface, as indicated by the page title 'Ledger Live Desktop® — Starting Up Your Device | Ledger.' Infrastructure analysis reveals the domain was flagged by 16 of 95 security vendors on VirusTotal, with detection entries on three distinct security blocklists: PhishDestroy, PhishingArmy, and OISD. The domain resolves to the IP address 34.144.206.118, hosted on Google Cloud infrastructure with technologies including Wix, React, Google Cloud CDN, and HTTP/3. The SSL certificate was issued by Let's Encrypt, and the domain was registered through GoDaddy.com, LLC. No creation date is available, but the rapid inclusion on multiple blocklists suggests recent malicious activity. Current status indicates the domain has been taken offline, reducing immediate risk to end users. However, the infrastructure and tactics observed align with persistent phishing campaigns targeting cryptocurrency users. Organizations and individuals are advised to block the domain and IP address at the network level, monitor for similar impersonation attempts, and verify all Ledger-related communications through official channels. Users who may have interacted with this domain should assume credential compromise and initiate account recovery procedures, including revoking unauthorized device access and rotating cryptographic keys.