ledgrelive-desktop[.]wixstudio[.]com

PhishDestroy identifies ledgrelive-desktop.wixstudio.com as an active cryptocurrency phishing domain designed to steal user credentials and digital assets through a fraudulent Ledger Live clone hosted on WixStudio.

This domain poses an elevated threat because it imitates a legitimate cryptocurrency platform’s desktop application. Evidence from multiple security sources confirms its malicious intent: VirusTotal’s 11/95 detection rate shows that 11 out of 95 antivirus engines flag it as malicious. It is blocked by two security blocklists (PhishingArmy and OISD), and resolves to a suspicious IP address (34.144.206.118) hosted on a platform typically associated with legitimate website builders. This unusual hosting setup is often exploited by threat actors to bypass traditional domain-based filtering and appear more credible.

Users who visited this domain should immediately check their cryptocurrency wallets and exchange accounts for unauthorized transactions or login attempts. Do not enter any seed phrases, private keys, or login credentials on this site. Clear browser cache and cookies related to cryptocurrency services, and run a full system antivirus scan. Report this domain to your IT security team or through platforms like PhishReport if your organization was targeted. Always verify URLs via official Ledger channels (e.g., ledger.com) before interacting with any financial application.