startd-live-us[.]wixstudio[.]com

This domain, startd-live-us.wixstudio.com, is identified as a high-risk brand impersonation threat targeting Ledger, a cryptocurrency hardware wallet provider. The phishing page mimics the official Ledger Live login interface, using the page title "Ledger® Live: Login®® | Your Wallet®" to deceive users into entering credentials. No explicit drainer kit signatures were detected, but the domain leverages social engineering tactics consistent with credential harvesting operations. Infrastructure analysis reveals the domain resolves to IP address 34.144.206.118, hosted on Google Cloud infrastructure with an SSL certificate issued by Let's Encrypt. The domain was registered through GoDaddy.com, LLC, and employs technologies including Wix, React, Google Cloud CDN, and HTTP/3. VirusTotal reports 13 out of 95 security vendors flagging this domain as malicious. It appears on three security blocklists and is currently blocked by PhishDestroy, PhishingArmy, and OISD. No Google Safe Browsing (GSB) detection data is available at the time of analysis. The domain has been taken offline, reducing immediate exposure risk. However, residual threats persist due to potential credential leaks from prior interactions. Organizations are advised to monitor for unauthorized access attempts linked to this domain and implement additional authentication controls for affected accounts. Users who engaged with the site should rotate credentials immediately and review transaction histories for anomalies. Continuous monitoring of related infrastructure is recommended to detect potential resurgence or similar campaigns.