ledgrapp[.]wixstudio[.]com
“404 Error: Page Not Found | Wix Studio”
Analysis of ledgrapp.wixstudio.com shows a confirmed Ledger brand impersonation campaign that was taken offline as of the report date, July 22, 2026. The domain was registered on March 24, 2026 through GoDaddy.com, LLC and resolves to the Google Cloud IP address 34.144.206.118, located in the United States. Infrastructure inspection reveals the site was built on Wix with a React front end, served via Google Cloud and Google Cloud CDN, and supported HTTP/3. The TLS certificate is provided by Let’s Encrypt, indicating a valid, publicly trusted HTTPS endpoint at the time of observation.
The page title returned by the server is "404 Error: Page Not Found | Wix Studio", and the HTTP response code is 404, suggesting the malicious landing page has been removed or is no longer accessible. Security telemetry shows the domain is listed on a single blocklist and was blocked by PhishDestroy. VirusTotal scans recorded four positive detections out of ninety‑four antivirus engines, reinforcing the malicious classification. The authoritative nameservers are dns1.p08.nsone.net through dns4.p08.nsone.net.
While the current offline status limits immediate threat exposure, the presence of brand‑specific impersonation indicates a potential broader campaign targeting Ledger users. Defenders should proactively add the domain and its associated IP address to outbound deny lists, monitor for new subdomains or similarly structured URLs hosted on the same nameserver set, and ensure web filtering solutions flag any future resolution to 34.144.206.118. Continuous threat‑intel feeds should be consulted for emerging indicators related to Ledger impersonation, and security teams should educate end users about unsolicited communications that reference Ledger services, urging verification through official channels before any credential submission.
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | ledgrapp.wixstudio.com |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources · synchronisé le 10/08/2026
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Registration: wixstudio.com
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain wixstudio.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of ledgrapp.wixstudio.com · checked Mar 24, 2026
Analyse de la configuration du site
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif