onedexlp[.]com

The domain onedexlp.com is classified as a brand impersonation phishing campaign targeting the financial hardware and software brand Ledger. The threat poses a significant risk to users who may be tricked into divulging sensitive information such as login credentials or financial data.

Technical indicators reveal that onedexlp.com is flagged by 7 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain is registered through NiceNIC International Group Co., Limited and resolves to the IP address 104.21.112.1, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain was created on September 06, 2024, and is currently active. It appears on one security blocklist and is blocked by PhishDestroy. Notably, the domain lacks an SSL certificate, which can be a red flag for users.

As of the latest assessment, onedexlp.com remains active and poses a high risk. Response actions should include adding the domain to security blocklists and alerting users to avoid interacting with the site. Continuous monitoring is recommended to track any changes in the infrastructure or content. Users are advised to verify the authenticity of any Ledger-related communications and to report any suspected phishing attempts to the brand's official support channels.