www-llegdar[.]vip

The domain www-llegdar.vip is identified as a generic phishing threat, currently active and assessed at high risk. No specific brand impersonation or known drainer kit has been attributed to this domain; however, its characteristics align with phishing infrastructure used for credential harvesting or fraudulent login pages. The page title 'Access Restricted' suggests an attempt to evade detection or restrict access to analysis tools.

Technical indicators: VirusTotal detection score is 1 out of 95 security vendors, indicating low but present flagging. The domain was registered on July 06, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with high-risk domains. It resolves to IP address 172.67.180.147, which is part of Cloudflare's CDN network (AS13335). The SSL certificate is issued by Google Trust Services, a legitimate certificate authority, which may lend false credibility. Google Safe Browsing status is not explicitly provided but should be assumed negative given the active threat status. No blocklist count is available in the provided data.

Current status: the domain remains active and accessible. Recommended response actions include blocking the domain at network level, reporting to the registrar for abuse, and monitoring for related infrastructure. Remaining risk is high due to the domain's active status, low detection rate, and use of a legitimate SSL certificate to appear trustworthy. Users should avoid interacting with this domain, and security teams should add it to threat intelligence feeds for proactive blocking.