acc-ledger-wallt[.]pages[.]dev

PhishDestroy identifies the domain acc-ledger-wallt.pages.dev as an active brand impersonation threat targeting Ledger users. This fraudulent page is designed to deceive visitors into divulging sensitive information or downloading malicious software under the guise of a legitimate Ledger service.

This domain was flagged by 2 of 95 VirusTotal vendors as of the latest scan, indicating it has yet to be widely recognized by security engines despite its malicious intent. Registered through Cloudflare, Inc., the domain resolves to IP address 188.114.96.3 and utilizes a Google Trust Services SSL certificate for added legitimacy. The impersonation of Ledger, a trusted name in cryptocurrency security, suggests a high-risk campaign aimed at users seeking secure wallet solutions.

While the domain remains under investigation, its active status poses a significant threat to unsuspecting visitors. PhishDestroy recommends blocking the domain and IP address at the network level, updating endpoint detection rules to include this indicator, and advising users to verify the authenticity of Ledger-related communications through official channels. Enhanced monitoring of related domains hosted on Cloudflare Pages is advised to prevent further spread of this impersonation campaign.