supportledger[.]wixstudio[.]com

This domain, supportledger.wixstudio.com, is identified as a high-risk brand impersonation phishing infrastructure specifically targeting Ledger, a cryptocurrency hardware wallet provider. The domain is currently offline but was actively used to deceive users into disclosing sensitive credentials or installing malicious software under the guise of legitimate Ledger support services. Analysis of the domain reveals precise technical indicators: it was flagged by 15 of 95 security vendors on VirusTotal, registered through GoDaddy.com, LLC on April 08, 2026, and resolved to the IP address 34.144.206.118. The domain appears on three security blocklists and was blocked by multiple threat intelligence feeds, including PhishDestroy, PhishingArmy, and OISD. The SSL certificate was issued by Let's Encrypt, a common tactic to lend superficial legitimacy to phishing sites. Infrastructure analysis indicates the use of Wix Studio's subdomain service, which is frequently exploited to bypass traditional domain reputation checks due to its shared hosting nature. As of the latest verification, supportledger.wixstudio.com has been taken offline, likely due to enforcement actions or abandonment by the threat actors. However, the risk of re-emergence or similar infrastructure remains high. Users are advised to verify all communications claiming to be from Ledger through official channels only, particularly those involving requests for wallet access, recovery phrases, or software updates. Organizations should update their blocklists to include this domain and monitor for newly registered lookalike domains or subdomains under hosting platforms that allow rapid deployment. Cryptocurrency holders should enable hardware-based two-factor authentication and treat all unsolicited support requests with extreme caution.