ledgr-crypto-walt-app[.]pages[.]dev

The domain ledgr-crypto-walt-app.pages.dev, now offline, impersonates the well-known cryptocurrency brand Ledger. It was flagged as malicious by 10 out of 91 vendors on VirusTotal, highlighting its threat level. The domain was registered with Cloudflare, Inc., and hosted on an IP located in Canada. The SSL certificate was issued by Google Trust Services, adding a layer of perceived legitimacy to the scam.

This phishing operation aimed to deceive users into believing they were interacting with the legitimate Ledger Live App, a popular cryptocurrency wallet and desktop setup. The page title, "Ledger Live App – Secure Wallet & Crypto Desktop Setup," was crafted to lure users into providing sensitive information under the guise of securing their crypto assets. PhishDestroy identified this domain on the same day it was created, showcasing its ability to detect threats in their nascent stages.

Despite being taken down, the domain's initial impact could have been significant, given the impersonation of a trusted brand like Ledger. The rapid detection and subsequent flagging by PhishDestroy and other vendors underscore the importance of early identification in mitigating such threats. The platform risk score of 78 out of 100 further indicates the potential danger posed by this phishing attempt. By leveraging the gap between domain registration and broader AV database updates, PhishDestroy effectively curtails the lifespan of such malicious domains.