feqledgrcom[.]wixstudio[.]com

This domain, feqledgrcom.wixstudio.com, poses a high-risk brand impersonation threat targeting Ledger, a hardware wallet provider. The site mimics the official Ledger onboarding page, displaying the title 'Ledger.com/Start® | Official lédger®' to deceive users into entering sensitive credentials or downloading malicious software. Such impersonation attempts are commonly used to harvest cryptocurrency wallet recovery phrases, private keys, or install malware under the guise of legitimate software updates. The domain’s design and branding closely resemble the authentic Ledger site, increasing the likelihood of successful social engineering attacks against unsuspecting users. Analysis indicates the domain resolved to IP address 34.144.206.118 and was registered through GoDaddy.com, LLC. As of the latest assessment, 16 out of 95 security vendors on VirusTotal flagged the domain as malicious. The domain appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. Infrastructure analysis reveals the use of Wix hosting, React for frontend development, and Google Cloud with HTTP/3 for content delivery. The SSL certificate was issued by Let’s Encrypt, a common practice among both legitimate and malicious sites to avoid browser warnings. Users who visited feqledgrcom.wixstudio.com should immediately revoke any sessions or credentials entered on the site. If cryptocurrency wallet recovery phrases or private keys were disclosed, the affected wallet should be considered compromised, and funds should be transferred to a new, secure wallet. Devices used to access the domain should undergo a full malware scan to detect potential infections. Additionally, users should monitor for unauthorized transactions and enable multi-factor authentication on all related accounts. Given the domain’s offline status, further interaction is unlikely, but vigilance is advised for similar impersonation attempts.