cdncoin-legder[.]wixstudio[.]com

Analysis of the domain cdncoin-legder.wixstudio.com indicates it is an active phishing infrastructure associated with cryptocurrency-themed fraud. Registered through Wix.com Ltd., the domain currently resolves to IP address 162.159.143.12, which is part of Cloudflare's network, a common hosting choice for both legitimate services and malicious operations due to its privacy and proxy features. The domain appears on at least one security blocklist, specifically PhishDestroy, suggesting prior detection of abusive behavior. As of the latest scan data, no antivirus vendors on VirusTotal have flagged the domain, though this absence does not confirm safety or legitimacy.

The domain's nameservers are not publicly resolvable, which may indicate recent registration or an attempt to obscure its operational details. The domain name itself, containing terms like 'cdncoin' and 'legder' (a likely misspelling of 'ledger'), suggests an intent to impersonate cryptocurrency services, possibly targeting users of Ledger hardware wallets or similar platforms. However, without direct analysis of the site's content, the exact nature of the phishing attempt—such as whether it involves credential harvesting, fake wallet software, or fraudulent token giveaways—remains unconfirmed.

Defenders should treat this domain as high-risk for crypto-related phishing, particularly given its active status and blocklist inclusion. Organizations are advised to monitor network traffic for connections to this domain, block access at the perimeter, and investigate any internal systems that have interacted with it. Further analysis, including SSL certificate inspection and HTTP response headers, may provide additional context on the domain's infrastructure and intent.