fluffy-pasca-96fb32[.]netlify[.]app

This domain, fluffy-pasca-96fb32.netlify.app, is flagged as an active brand impersonation phishing site specifically targeting Ledger, a well-known cryptocurrency hardware wallet provider. The threat type is classified as brand_impersonation with a high risk level, and the domain remains operational as of the latest verification. The page title, '1 new message,' is a common social engineering tactic designed to lure victims into interacting with malicious content under the guise of an urgent notification. Infrastructure analysis reveals that the domain is registered through Netlify and resolves to the IP address 35.157.26.135, located in Germany under AS16509 (Amazon.com, Inc.). The SSL certificate is issued by DigiCert Inc, specifically the DigiCert Global G2 TLS RSA SHA256 2020 CA1, which is not inherently suspicious but is often exploited by threat actors to lend a false sense of legitimacy. The domain has been flagged by 9 of 95 security vendors on VirusTotal, indicating a strong consensus among threat intelligence providers regarding its malicious nature. Additionally, the domain appears on at least one security blocklist, further corroborating its classification as a phishing resource. The current status of fluffy-pasca-96fb32.netlify.app remains active, posing an ongoing risk to users who may be deceived into divulging sensitive information such as login credentials, recovery phrases, or financial details. Immediate mitigation steps are recommended, including blocking the domain at the network level, updating endpoint protection rules to detect and prevent access, and alerting users to the threat. Organizations should also monitor for any indicators of compromise (IoCs) associated with this domain, such as the IP address 35.157.26.135 or the SSL certificate thumbprint, to identify potential breaches. Users are advised to verify the authenticity of any communication claiming to be from Ledger by cross-referencing with official channels and avoiding interaction with unsolicited messages or links.