pay[.]legacy-ledgerco[.]com

PhishDestroy identifies pay.legacy-ledgerco.com as an elevated-risk brand impersonation domain specifically designed to mimic Ledger, a well-known cryptocurrency hardware wallet company. The threat type is brand impersonation, where attackers create a fraudulent payment page to deceive users into revealing sensitive information or sending funds.

This domain was registered through GoDaddy.com, LLC on July 23, 2025, and resolves to IP address 100.49.110.141. VirusTotal analysis shows 3 out of 95 security vendors flagging it as malicious, and it appears on 1 security blocklist. The SSL certificate is issued by GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2, which lends a false sense of legitimacy. The page title, "Online payment @ Legacy Ledger Co," further reinforces the impersonation attempt.

To protect against this brand impersonation threat, users should never enter any personal or financial information on this site. Always verify the legitimacy of any page claiming to be from Ledger by checking the official URL directly. Enable two-factor authentication on your Ledger accounts and use a password manager to avoid reusing credentials. Report suspicious domains to relevant authorities and block the domain at the network level if possible.