legdar-started[.]wixstudio[.]com

The domain legdar-started.wixstudio.com is assessed to have an elevated risk level with a specific threat type of brand impersonation. This domain was designed to mimic the official Ledger brand, likely to deceive users and gain unauthorized access to sensitive information.

Analysis indicates that this domain was registered through GoDaddy.com, LLC, and it uses a Let's Encrypt SSL certificate. The domain resolves to the IP address 34.144.206.118 and was created on April 06, 2026. According to VirusTotal, 15 out of 95 security vendors flagged the domain as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Technologies detected on the domain include Wix, React, Google Cloud, Lodash, HSTS, Google Cloud CDN, and HTTP/3. Although the domain is currently offline, the infrastructure and design suggest a sophisticated attempt at impersonation.

To mitigate the risks associated with this brand impersonation threat, users and organizations are advised to verify the legitimacy of any Ledger-related domains by cross-referencing with official Ledger communication channels. Network administrators should consider implementing DNS-based blacklisting to prevent access to legdar-started.wixstudio.com. Additionally, regular security awareness training should be provided to employees to recognize and report suspicious domain names and web pages. Security teams should also monitor for any resurgence of the domain and update their blocklists accordingly.