magma-ledger[.]app

PhishDestroy identifies magma-ledger.app as an active brand impersonation domain targeting Ledger cryptocurrency wallet users. This malicious site is currently operational and has been confirmed to impersonate the legitimate Ledger brand. Users lured to this domain may be subjected to credential theft, cryptocurrency theft, or malware infiltration. magma-ledger.app was flagged by 2 of 95 VirusTotal security vendors, operates through Devexpanse Ltd, resolves to IP 104.21.75.191, and was created on May 12, 2026. It is listed on 1 security blocklist and has a Let’s Encrypt SSL certificate. The domain appears on the Hagezi blocklist and carries a low trust score due to its recent registration and association with brand impersonation tactics. Technical analysis indicates this domain uses a deceptive naming convention to mimic the legitimate Ledger ecosystem, specifically targeting users searching for “magma” or related services within the Ledger ecosystem. As of this assessment, magma-ledger.app remains active and poses an elevated risk to unsuspecting users. This domain leverages brand trust to deceive visitors into entering sensitive information or downloading malicious software. Due to its recent creation and low detection rate, it may evade some security filters. PhishDestroy recommends users never access Ledger services through third-party or unfamiliar domains. Always verify the domain is ledger.com or a subdomain thereof. If you have visited magma-ledger.app, disconnect from the internet, scan your device with updated antivirus software, and change all Ledger-related passwords using a secure network. Report the domain to Ledger and relevant cybersecurity authorities to help mitigate further abuse.