I want to report an active phishing gateway domain: ledger-app.at .
What it does:
When visiting ledger-app.at, it immediately executes a malicious redirect chain passing through referral parameters linked to the official Ledger site (ledger.com).
This setup is used as a cloaking mechanism to pass security checks/scanners, build false legitimacy via referral tracking, and route users to dynamic Web3 wallet drainers / credential harvesting pages depending on the visitor's environment.
Domain Details:
Phishing Domain: ledger-app.at (www.ledger-app.at)
Target Brand: Ledger / Ledger Live (Official: https://ledger.com)
Main IP: 188.114.97.3 (Cloudflare)
https://www.virustotal.com/gui/domain/ledger-app.at
Threat Type: Brand Impersonation / Deceptive Referral Redirect / Phishing Gateway
Please add ledger-app.at to the blocklist to prevent further attacks.

I want to report an active phishing gateway domain: ledger-app.at .
What it does:
When visiting ledger-app.at, it immediately executes a malicious redirect chain passing through referral parameters linked to the official Ledger site (ledger.com).
This setup is used as a cloaking mechanism to pass security checks/scanners, build false legitimacy via referral tracking, and route users to dynamic Web3 wallet drainers / credential harvesting pages depending on the visitor's environment.
Domain Details:
Phishing Domain: ledger-app.at (www.ledger-app.at)
Target Brand: Ledger / Ledger Live (Official: https://ledger.com)
Main IP: 188.114.97.3 (Cloudflare)
https://www.virustotal.com/gui/domain/ledger-app.at
Threat Type: Brand Impersonation / Deceptive Referral Redirect / Phishing Gateway
Please add ledger-app.at to the blocklist to prevent further attacks.