ledger-live-login-contact[.]vercel[.]app

This domain, ledger-live-login-contact.vercel.app, poses a specific threat of brand impersonation targeting the cryptocurrency hardware wallet brand Ledger. The domain mimics the official Ledger Live Login page, potentially misleading users into providing sensitive information such as login credentials and private keys, which can lead to unauthorized access and financial loss.

Analysis indicates that the domain is registered through Vercel Inc. and currently resolves to the IP address 216.198.79.131, which is located in the United States under the Autonomous System AS16509, operated by Amazon.com, Inc. The SSL certificate for the domain is issued by Google Trust Services, which may add an additional layer of perceived legitimacy. On VirusTotal, 17 out of 95 security vendors have flagged this domain, and it appears on 2 security blocklists, including PhishDestroy and PhishingDB. The domain has been taken offline, which may indicate a response to security alerts or removal by the hosting provider.

If users have visited this domain, they should immediately change their Ledger account passwords and any other credentials that may have been compromised. Users should also monitor their financial accounts and cryptocurrency wallets for any unusual activity. It is recommended that users report any instances of interaction with this domain to their respective security teams or support services. Additionally, users should be vigilant and verify the URL of any Ledger-related pages they visit, ensuring they are accessing official Ledger domains and not impersonators.