getting-starten-live[.]wixstudio[.]com

This domain, getting-starten-live.wixstudio.com, was identified as a brand impersonation attempt targeting Ledger, a cryptocurrency hardware wallet provider. Analysis indicates the site is currently offline, returning an HTTP 404 status with the page title '404 Error: Page Not Found | Wix Studio.' The domain was hosted on Wix Studio infrastructure and resolved to IP address 34.144.206.118, part of Google Cloud's US-based network (ASN 15169). SSL certification was provided by Let's Encrypt (YR1), and the domain was registered through GoDaddy.com, LLC with nameservers dns1.p08.nsone.net through dns4.p08.nsone.net. Detection data shows the domain appeared on one security blocklist and was flagged by PhishDestroy.

No detections were recorded by the 91 vendors scanning the domain on VirusTotal at the time of assessment, though the absence of detections does not confirm safety. Technologies detected include Wix, React, Google Cloud, and Google Cloud CDN, with HTTP/3 support. The domain's current offline status limits further analysis of its content or functionality. Defenders should treat this domain as a confirmed Ledger impersonation attempt based on available intelligence.

While offline, the domain remains a potential threat vector if reactivated. Recommended actions include monitoring for DNS reactivation, reviewing logs for connections to 34.144.206.118, and blocking the domain at perimeter security controls. If Ledger-related phishing campaigns are a priority, consider proactive hunting for similar Wix Studio-hosted domains using the same infrastructure or naming patterns. The domain's registration and hosting details provide additional pivot points for threat hunting, particularly within Google Cloud and Wix Studio environments.