lledgar-app[.]info

This domain is flagged as a phishing site targeting users of the U.S. Securities and Exchange Commission's Edgar filing system. The site mimics the legitimate Edgar portal interface to harvest corporate credentials, enabling attackers to submit fraudulent filings, manipulate public records, or gain unauthorized access to confidential financial data. The threat primarily affects publicly traded companies, law firms, and financial service providers who interact with SEC systems. Analysis indicates the domain was registered on July 09, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the site resolves to 188.114.96.3, a Cloudflare IP address, and employs HTTP/3 with Cloudflare Browser Insights for performance monitoring. Despite active malicious activity, the domain shows 0/95 detections on VirusTotal, suggesting evasion of current detection mechanisms. The SSL certificate issued by Google Trust Services adds a false layer of legitimacy. Users who visited lledgar-app.info should immediately revoke any entered credentials and monitor their Edgar filing accounts for unauthorized activity. Corporate security teams should block the domain and IP 188.114.96.3 at the network perimeter. If credentials were submitted, initiate the SEC's Edgar filing account recovery process and review recent submissions for tampering. Given the domain's future registration date (2026), this may represent a preemptive attack infrastructure setup or a data entry error in registration records, warranting continued monitoring.