startden-live[.]wixstudio[.]com

This domain, startden-live.wixstudio.com, is confirmed as a phishing site specifically designed to impersonate Ledger, a cryptocurrency wallet provider. Analysis indicates the site presents a fraudulent login interface mimicking Ledger Live, likely intended to harvest credentials or deploy crypto-draining malware. The page title, 'Ledger® Live: Login®® | Your Wallet®®,' reinforces the impersonation attempt. As of the latest verification, the domain has been taken offline, though prior activity remains a documented threat. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC and resolved to the IP address 34.144.206.118. Security vendors flagged the domain in 12 of 95 VirusTotal detections, while it appears on three independent security blocklists, including PhishDestroy, PhishingArmy, and OISD. The site employed technologies such as Wix, React, Google Cloud, and Google Cloud CDN, alongside HTTP/3 for content delivery. The SSL certificate was issued by Let’s Encrypt, a common but not exclusive indicator of legitimate or malicious infrastructure. The domain is currently offline, though its prior operation poses residual risks to users who may have interacted with it. Organizations and individuals are advised to block the domain and its resolved IP at the network level. Users who accessed the site should immediately revoke any active sessions, rotate credentials for associated accounts, and monitor for unauthorized transactions. Security teams should review logs for connections to 34.144.206.118 and the domain itself, as these serve as concrete indicators of compromise.