helpdesk-ledger-live-logincdn-us[.]vercel[.]app

PhishDestroy has identified the domain helpdesk-ledger-live-logincdn-us.vercel.app as a high-risk brand impersonation site currently active. This domain specifically impersonates Ledger, a well-known cryptocurrency hardware wallet provider, to deceive users into revealing sensitive credentials or private keys. The threat type is brand impersonation with a high risk level, indicating a sophisticated attempt to steal crypto assets.

The domain was created on May 6, 2026, and is registered through Vercel, resolving to IP address 64.29.17.195. It is flagged by 10 out of 95 VirusTotal security vendors, and it appears on 1 security blocklist. The SSL certificate is issued by Google Trust Services (WR1), which lends a false sense of legitimacy. Despite the low blocklist count, the high number of VirusTotal detections and the explicit impersonation of Ledger make this a serious threat.

As of the latest analysis, the domain remains active and is serving a page titled "Ledger® Hardware Wallet | Secure Your Crypto Assets." PhishDestroy strongly advises users to avoid visiting this site, entering any personal or financial information, or connecting any hardware wallet. Always verify the official Ledger website URL (ledger.com) and use bookmarks or trusted sources. If you have already interacted with this domain, immediately transfer your crypto assets to a new wallet and contact Ledger support for further guidance.