secretledger-aiapp-com[.]financecryptoworld[.]com

The domain secretledger-aiapp-com.financecryptoworld.com has been identified as a brand impersonation threat specifically targeting Ledger, a popular cryptocurrency hardware wallet. This domain is part of a phishing operation designed to trick users into believing it is the official Ledger website, with the ultimate goal of stealing cryptocurrency through a drainer kit. The site's title, 'Secret Ledger AI ™ - Die offizielle App-Website 2026 [AKTUALISIERT]', is a clear attempt to appear legitimate to German-speaking users.

Technical analysis reveals that this domain resolves to IP address 104.26.11.169 and was registered through MainReg Inc. on January 30, 2025. VirusTotal analysis shows that 17 out of 95 security vendors flag this domain as malicious, indicating a high level of confidence in its threat status. The SSL certificate is issued by Google Trust Services (WE1), which is a common certificate authority, and the domain is currently listed on one security blocklist.

As of now, the domain remains active and continues to pose a risk to users. PhishDestroy recommends that users avoid visiting this site and report it to relevant authorities. The remaining risk is significant, as the domain could still be used to harvest credentials and drain crypto wallets. Users should always verify the authenticity of Ledger-related websites by checking the official URL and using trusted sources. PhishDestroy will continue to monitor this domain and update its status accordingly.