Yggdrasil

The website is hosted on a generic 'edgeone.app' subdomain instead of the official 'trezor.io' domain, which is a major indicator of phishing. +1 more

Significant mismatch between the URL branding (Solana) and the actual page content (Festivals of the World), a common sign of a malicious landing page. +1 more

The domain 'ellipaldesktops.live' is a suspicious variation of the legitimate brand domain 'ellipal.com', using a generic '.live' TLD often associated with phishing. +1 more

The website makes highly suspicious claims of '94.2% Forecast Accuracy' and falsely asserts it is 'Powered by Phantom', which are hallmarks of crypto-drainer scams. +1 more

The domain 'unlbase.app' uses a lowercase 'l' to impersonate the 'UNIBASE' brand displayed in the page logo (typosquatting). +1 more

The domain name 'solana-exchange.org' is not an official Solana ecosystem site, and the page explicitly includes a banner attempting to normalize security warnings users may receive. +1 more

The URL uses typosquatting ('ledzer' instead of 'ledger') and is hosted on a generic subdomain of pages.dev, a common sign of a phishing campaign. +1 more

The domain 'hl.cn' and the deceptive subdomain 'google-google-apps' are not affiliated with Google, representing a clear brand impersonation attempt. +1 more

The domain 'google-google-apps.hl.cn' is a clear case of brand impersonation using a non-Google TLD to deceive users. +1 more

The website uses a free hosting service (pages.dev) rather than the official Ledger domain, which is a major red flag for a financial application. +1 more

The domain name 'ml-1901.pro' has no relation to the 'France Colis' branding displayed on the page, which is a classic indicator of a phishing attempt. +1 more

The website employs classic scam tactics such as a fake 'live' claim feed and a countdown timer to create a sense of urgency and false social proof. +1 more