web3trustledger[.]com

PhishDestroy identifies web3trustledger.com as an active brand impersonation site designed to deceive users into divulging sensitive wallet credentials or installing crypto drainers. This domain, registered on December 17, 2025, through Dynadot Inc, resolves to IP address 204.188.228.22 and is secured with a Let's Encrypt SSL certificate. As of the latest scan, it remains undetected by VirusTotal, with 0 detections out of 95 security vendors. The site specifically impersonates the well-known hardware wallet brand Ledger, creating a high-confidence decoy intended to exploit user trust in the legitimate platform. No third-party blocklists currently flag this domain, and its trust scores remain unassessed due to its recent creation. The site was created on December 17, 2025, less than 24 hours prior to this assessment, suggesting a rapidly deployed threat with minimal historical footprint. Its infrastructure is hosted on an IP associated with prior web infrastructure activity, though attribution remains unclear due to the novelty of the domain. Given the lack of detection and recent registration, users interacting with this domain are at immediate risk of credential theft, wallet compromise, or funds drainage via embedded drainer scripts. PhishDestroy strongly advises users to avoid this domain entirely and to verify any Ledger-related URLs using official channels before proceeding. If exposure has occurred, users should revoke any connected permissions, transfer funds to a secure wallet, and perform a device audit.