appkledgerd[.]wixstudio[.]com

This domain, appkledgerd.wixstudio.com, is flagged as a high-risk phishing site specializing in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. Analysis indicates the domain was designed to mimic legitimate Ledger services, likely to deceive users into divulging sensitive credentials or wallet recovery phrases. No specific drainer kit signatures were identified, but the infrastructure aligns with known phishing campaigns leveraging free hosting platforms to evade detection. Infrastructure analysis reveals the domain resolves to IP address 34.144.206.118 and was registered through GoDaddy.com, LLC on April 28, 2026. It is currently detected by 13 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appears on three security blocklists, including PhishDestroy and PhishingArmy, and employs technologies such as Wix, React, and Google Cloud CDN. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites. No Google Safe Browsing (GSB) hits were recorded at the time of analysis. The domain is currently offline, displaying a 404 error page hosted on Wix Studio. While the immediate threat is mitigated, the infrastructure remains a potential risk for future malicious activity. Defenders are advised to monitor for re-activation, particularly under similar subdomains or IP ranges. Network-level blocking of the resolved IP (34.144.206.118) and associated domains is recommended as a precautionary measure. Users should verify Ledger-related communications exclusively through official channels to avoid credential compromise.