stardger----io[.]webflow[.]io

The domain stardger----io.webflow.io has been identified as a brand impersonation threat targeting the cryptocurrency hardware wallet brand Ledger. The domain does not appear to be using any specific drainer kit for credential harvesting or malware distribution.

Infrastructure analysis reveals that stardger----io.webflow.io was created on February 21, 2026, and is registered through NameCheap, Inc. The domain resolves to the IP address 172.64.151.8, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The SSL certificate is issued by Google Trust Services, with the certificate identifier WE1. VirusTotal reports a detection score of 16 out of 95, indicating that a significant number of security vendors recognize this domain as malicious. The domain appears on one security blocklist and has been flagged by the PhishDestroy service.

The domain is currently offline, and no active phishing page is accessible. Despite its offline status, it is important to note that the infrastructure and registration details remain intact, posing a potential risk if the domain is reactivated. Security teams and users are advised to monitor for any signs of reactivation and to avoid interacting with any similar-looking domains or links that claim to offer services related to Ledger. Additionally, any credentials or sensitive information that may have been compromised should be changed immediately, and users should enable two-factor authentication on their Ledger devices to enhance security.