startapp-ldger[.]wixstudio[.]com

PhishDestroy identifies startapp-ldger.wixstudio.com as an active generic phishing domain masquerading as a Ledger Live application login portal. The campaign employs a WixStudio subdomain crafted to mimic official Ledger branding, leveraging the trust associated with legitimate crypto wallet services. No known drainer kit signatures or advanced obfuscation were detected in initial analysis, indicating a reliance on social engineering and domain similarity rather than sophisticated malware deployment. The operators appear to be testing a low-cost, high-reach phishing model targeting cryptocurrency users.

Technical indicators confirm this threat remains under the radar with a VirusTotal detection ratio of 6/95 as of the latest scan. The domain resolves to IP address 34.144.206.118 via a Let's Encrypt SSL certificate, suggesting an attempt to appear legitimate. While registrar and creation date data are obscured due to Wix's privacy protection, the use of a WixStudio subdomain indicates recent deployment. Google Safe Browsing (GSB) has not yet flagged the domain, and no current blocklist entries were found across leading threat intelligence platforms. This combination of evasion techniques—low detection, fresh infrastructure, and unflagged status—positions the domain as a high-potential risk for users searching for 'Ledger Live' or related wallet services.

The campaign is currently active and under investigation, with no formal takedown initiated as of seed 10c44d. Immediate user action includes blocking access to startapp-ldger.wixstudio.com and reporting the domain to security teams or browser vendors such as Google Safe Browsing. The remaining risk is elevated due to the absence of detection signatures and the domain's plausible mimicry of a widely used crypto wallet platform. Users are advised to verify web addresses manually and avoid clicking on links in unsolicited emails or search results related to Ledger Live.