ledge-us[.]wixstudio[.]com
ledge-us.wixstudio.com 网络钓鱼与安全检查
“Ledger Live Desktop® — Getting Started | Official Ledger Wallet”
ledge-us.wixstudio.com — 内容不可用 (HTTP 404). 品牌冒充:Ledger; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 5/91 (alphaMountain.ai, Certego, Cluster25, ESET, Gridinsoft); PhishDestroy score 65/100. 注册商: GoDaddy.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis of the domain ledge-us.wixstudio.com indicates an elevated-risk brand impersonation campaign targeting Ledger, a cryptocurrency hardware wallet provider. The domain, registered through GoDaddy.com, LLC on December 17, 2016, resolves to the IP address 34.144.206.118, hosted on Google Cloud infrastructure (AS396982). As of July 24, 2026, the domain is offline, returning an HTTP 404 status, though it was previously flagged by one security blocklist (PhishDestroy) and detected by 5 of 91 security vendors on VirusTotal. The page title, 'Ledger Live Desktop® — Getting Started | Official Ledger Wallet,' explicitly impersonates Ledger’s official software, confirming the brand impersonation classification. Infrastructure analysis reveals the use of Wix hosting, React, Google Cloud CDN, and HTTP/3, alongside an SSL certificate issued by Let’s Encrypt (R13).
Nameservers are hosted under NS1 (dns1.p08.nsone.net through dns4.p08.nsone.net). While the domain’s creation date predates the observed malicious activity, this does not preclude its later compromise or repurposing for phishing. The combination of a legitimate-looking page title, targeted brand, and detection by multiple security vendors suggests a deliberate attempt to deceive users into interacting with fraudulent Ledger-related content. Defenders should treat this domain as malicious, particularly in contexts involving cryptocurrency or wallet-related communications.
Blocking the domain and its associated IP (34.144.206.118) at the network level is recommended. Given the use of Google Cloud infrastructure, monitoring for similar subdomains under wixstudio.com or other Wix-hosted properties may help identify related threats. The domain’s current offline status limits further analysis, but historical logs or passive DNS data may reveal additional indicators of compromise.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
Registration: wixstudio.com
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain wixstudio.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
所用技术 · 7 identified
Wix provides cloud-based web development services, allowing users to create HTML5 websites and mobile sites.
www.wix.com 置信度 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 置信度 100%Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.
www.lodash.com 置信度 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%Cloud CDN uses Google's global edge network to serve content closer to users.
cloud.google.com 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
证据与外部报告
PD-20260621-A79A13 Recipient: abuse@godaddy.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。