pay[.]hustleledger[.]app

PhishDestroy identifies the domain pay.hustleger.app as an ACTIVE brand impersonation scam currently under investigation for mimicking the Ledger cryptocurrency wallet brand. The campaign is classified under the unique seed identifier 03f07f and remains unresolved despite its ongoing operations. This domain is designed to deceive users into believing it is an official Ledger service, potentially leading to credential theft or financial fraud.

This domain was flagged by 2 out of 95 VirusTotal vendors as of the latest scan, indicating a low immediate detection rate among security solutions. It resolves to the IP address 100.49.0.246 and utilizes an SSL certificate issued by GoDaddy.com, Inc., which does not inherently validate the domain’s legitimacy. The domain’s infrastructure and certificate details suggest opportunistic hosting rather than a sophisticated, long-planned operation. Historical WHOIS data indicates recent creation, and this domain has not yet been listed on major blocklists. Trust scores from threat intelligence platforms remain neutral due to the lack of widespread detection.

While the immediate risk presented by this domain is unclear due to its low VirusTotal detection rate, its active status and impersonation of a high-profile brand like Ledger warrant heightened caution. Users are advised to avoid interacting with this domain or any associated links. Cryptocurrency wallet users should verify URLs through official Ledger channels and utilize security tools to detect impersonation attempts. Security teams are encouraged to monitor this domain for emerging patterns and report any observed malicious activity to aid in its takedown. The current status remains under investigation, and updates will be provided as new intelligence emerges.