ledger-dun-six-phi-newyork-pod-paint-sigma-gole-324324-psi[.]vercel[.]app

PhishDestroy has identified a high-risk brand impersonation domain, ledger-dun-six-phi-newyork-pod-paint-sigma-gole-324324-psi.vercel.app, which is actively targeting Ledger cryptocurrency wallet users. This domain is designed as a crypto drainer, aiming to steal digital assets by mimicking the legitimate Ledger brand. The threat is currently active and poses a significant risk to unsuspecting users.

Technical analysis reveals that the domain was created on April 03, 2026, and is registered through Vercel Inc., resolving to IP address 64.29.17.67. It employs an SSL certificate issued by Google Trust Services / WR1. VirusTotal data shows that 16 out of 95 security vendors flag this domain as malicious, indicating a broad consensus among security engines. Additionally, it appears on 1 security blocklist, though it is not currently listed on Google Safe Browsing.

The domain remains active at the time of this report, and PhishDestroy recommends immediate action: users should avoid visiting the domain, block it at the network level, and report it to hosting provider Vercel. The primary risk is the potential for credential theft and cryptocurrency loss via the drainer kit. Users are advised to only access Ledger services through official channels and verify URLs carefully before entering sensitive information.