ca72912c[.]purree[.]pages[.]dev

This domain, ca72912c.purree.pages.dev, was identified as a high-risk phishing resource impersonating Ledger, a cryptocurrency hardware wallet provider. Analysis indicates the site presented a fraudulent version of the Ledger Live interface, likely designed to harvest user credentials, recovery phrases, or private keys. Such attacks are commonly used to facilitate unauthorized access to cryptocurrency wallets, leading to direct asset theft or subsequent deployment of crypto drainer malware. The page title, 'Ledger Live,' reinforces the deception by mimicking the legitimate application’s branding, increasing the likelihood of user engagement under false pretenses. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. and resolved to the IP address 188.114.97.3, associated with AS13335. The domain was created on September 02, 2020, and has been flagged by Google Safe Browsing as phishing. VirusTotal reports 17 out of 95 security vendors detecting the domain as malicious, while one security blocklist has listed it. The SSL certificate was issued by Google Trust Services, serial number WE1, a common characteristic of both legitimate and malicious Cloudflare-hosted pages. The domain has since been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Users who visited ca72912c.purree.pages.dev or entered sensitive information on the site should assume compromise. Immediate steps include revoking any active sessions associated with Ledger Live, rotating all passwords and recovery phrases linked to cryptocurrency wallets, and monitoring connected accounts for unauthorized transactions. Devices used to access the domain should undergo a full security scan to detect potential malware or backdoors. If wallet credentials were exposed, transferring assets to a new, secure wallet is strongly advised. Additionally, affected users should report the incident to relevant financial or cybersecurity authorities for further mitigation and tracking.