started-ledger[.]wasmer[.]app

The domain started-ledger.wasmer.app is an impersonation scam targeting Ledger, a popular cryptocurrency wallet provider. This domain, which has been taken down, was flagged as malicious by 13 out of 91 vendors on VirusTotal. It is also listed on public blocklists such as PhishDestroy and OpenPhish. The domain was registered through Wasmer and hosted on IP 62.210.172.150 in France, under the organization Scaleway SAS.

This phishing operation aimed to deceive users into believing they were interacting with the legitimate Ledger brand. The use of Let's Encrypt for SSL certification suggests an attempt to appear trustworthy to potential victims. The platform risk score for this domain was calculated at 73 out of 100, indicating a significant threat level during its active period.

Despite being offline now, the domain's activity highlights the ongoing risks posed by phishing sites that exploit brand trust. The swift detection by PhishDestroy on June 21, 2026, underscores the importance of early threat identification. The domain's presence on multiple blocklists further emphasizes the need for robust security measures to protect against such scams.