getledgr[.]zapier[.]app

The phishing domain getledgr.zapier.app impersonates Ledger, a well-known cryptocurrency wallet provider. This domain was detected early in its lifecycle, with 0 out of 94 detections on VirusTotal, indicating its freshness. PhishDestroy's proactive monitoring identified the threat before it propagated through antivirus databases, demonstrating the importance of early detection systems.

Registered with Name.com, Inc., and hosted on an Amazon.com, Inc. IP address (64.239.109.65) in the US, the domain was live for a brief period before being taken offline. The page title 'Forms' suggests an attempt to harvest sensitive user information through fraudulent forms. The platform risk score for this domain was 48 out of 100, reflecting a moderate level of threat.

The domain's presence on a public blocklist, specifically PhishDestroy's, further underscores the risk it posed to users. Although now offline, the domain exemplifies the tactics used by cybercriminals to exploit the gap between domain registration and antivirus detection. By targeting Ledger users, the attackers aimed to capitalize on the growing interest and investment in cryptocurrency, highlighting the need for continuous vigilance and robust security measures in the digital finance sector.