ledgecomstart-home[.]wixstudio[.]com

This domain is flagged as a high-risk phishing infrastructure targeting cryptocurrency hardware wallet users. Analysis indicates the domain, ledgecomstart-home.wixstudio.com, mimics the official Ledger.com/Start® onboarding page, a tactic designed to harvest login credentials, recovery phrases, or personal information from unsuspecting victims under the guise of a legitimate setup process. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC and resolves to the IP address 34.144.206.118. The SSL certificate is issued by Let's Encrypt, a common tactic to evade browser security warnings. At the time of assessment, 14 out of 95 security vendors on VirusTotal flagged this domain as malicious. The domain is currently offline but has been blocked by three major security blocklists, including PhishDestroy, PhishingArmy, and OISD. No creation date is available, but the use of a subdomain under wixstudio.com suggests rapid deployment to exploit brand recognition without incurring registration costs. Mitigation against this specific threat type requires multi-layered defenses. Users should verify domain authenticity by cross-referencing URLs with the official Ledger website and avoid entering sensitive information on pages not hosted under ledger.com or its verified subdomains. Organizations should implement DNS-based blocking using the provided indicators, including the domain and resolving IP 34.144.206.118. Security teams are advised to monitor for Let's Encrypt certificates issued to newly created subdomains of free hosting platforms, as these are frequently abused for phishing. Endpoint protection should be configured to alert on access attempts to domains flagged by 10 or more security vendors, particularly those impersonating financial or cryptocurrency services.