ledgrlive-desktop[.]wixstudio[.]com

PhishDestroy identifies ledgrlive-desktop.wixstudio.com as an active Ledger Live phishing domain designed to impersonate the legitimate Ledger Live desktop application, tricking users into entering recovery phrases or sensitive credentials under the guise of a software update or security check. This domain was flagged by PhishDestroy and currently appears on one security blocklist. It resolves to IP 34.144.206.118 and uses a Let's Encrypt SSL certificate to appear legitimate. VirusTotal analysis shows 0 detections out of 95 engines (as of latest scan), indicating it is not yet widely recognized by antivirus vendors. The domain is hosted on WixStudio, which is commonly misused in spoofing campaigns due to its free and flexible hosting services. Technical indicators include low detection rates despite active abuse, suggesting a recently deployed campaign aiming to evade early detection systems. Users who visited ledgrlive-desktop.wixstudio.com should immediately stop interacting with the site, avoid entering any cryptocurrency wallet recovery phrases, passwords, or 2FA codes, and scan their devices with updated antivirus software. If any credentials were entered, revoke access to Ledger Live and related crypto accounts immediately. Report the domain to your antivirus provider and consider changing passwords in a secure offline environment. Monitor accounts for unusual transactions and enable additional security layers like hardware wallets and withdrawal confirmations.