lookesmiste[.]azurewebsites[.]net

The domain lookesmiste.azurewebsites.net was registered on February 21, 2026 through MarkMonitor, Inc. and is hosted on Microsoft Azure infrastructure (IP 20.107.224.63, ASN AS8075, located in Ireland). No SSL certificate was observed, meaning the site does not serve traffic over HTTPS. The page title returned by the HTTP endpoint is “Ledger.com/Start® | Getting started — Ledger”, indicating an attempt to reference the Ledger brand, which aligns with the listed scam type of a crypto‑related phishing operation.

VirusTotal analysis recorded 12 detections out of 95 scanners, and the domain appears on a single security blocklist. It has also been flagged and blocked by PhishDestroy. Current monitoring shows the domain is offline, but historical data confirms it was active long enough to be indexed by multiple detection services.

The combination of a reputable registrar, Microsoft hosting, lack of TLS, and the Ledger‑related page title suggests a typical credential‑harvesting campaign targeting cryptocurrency users. Defenders should add the domain and its resolving IP to outbound filtering rules, enforce TLS inspection to catch future similar deployments, and monitor for any re‑registration of the same name or similar Azure subdomains. Continuous threat‑intel feeds should be consulted for updates, as the underlying content has not been publicly archived and further analysis may reveal additional indicators of compromise.