live-ledgroapp[.]wixstudio[.]com

This domain, live-ledgroapp.wixstudio.com, poses a brand impersonation threat specifically targeting Ledger, a hardware cryptocurrency wallet provider. The site mimics the official Ledger Live application interface, presenting itself as the "Official Site | Ledger Live App – The Official Wallet" to deceive users into entering sensitive credentials or downloading malicious software. Such impersonation attempts are frequently associated with crypto drainer schemes, where attackers siphon funds from victims' wallets by exploiting trust in legitimate brands.

Analysis indicates the domain has been flagged by 6 out of 95 security vendors on VirusTotal, a relatively low but notable detection rate suggesting targeted or evasive tactics. The domain was registered through GoDaddy.com, LLC and is hosted on infrastructure utilizing Wix, React, and Google Cloud technologies. It resolves to the IP address 34.144.206.118 and currently appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. The SSL certificate is issued by Let's Encrypt, a common certificate authority exploited in phishing campaigns to lend an appearance of legitimacy.

Users who visited live-ledgroapp.wixstudio.com or interacted with its content should immediately revoke any wallet permissions granted to unknown applications and monitor their accounts for unauthorized transactions. If credentials were entered, users must assume compromise and migrate funds to a new wallet address while resetting all associated passwords. Devices used to access the domain should undergo a full malware scan, and affected users are advised to report the incident to relevant security teams for further mitigation.