vercelsync-ledger[.]com

This domain, vercelsync-ledger.com, poses a brand impersonation threat targeting Ledger, a hardware cryptocurrency wallet provider. The site mimics official Ledger support pages, using a page title of 'home - support' to deceive users into believing they are interacting with legitimate customer service infrastructure. Such impersonation typically aims to harvest wallet recovery phrases, private keys, or login credentials, enabling attackers to drain cryptocurrency assets from victims' accounts. Analysis indicates the domain was registered on March 26, 2026, through Spaceship, Inc., and resolved to the IP address 66.29.148.158, hosted by Namecheap, Inc. in the United States. The domain appears on one security blocklist and is flagged by 12 out of 95 security vendors on VirusTotal. Notably, the site lacks an SSL certificate, a red flag for users accustomed to encrypted connections on legitimate financial or crypto-related platforms. The infrastructure and registration details further support its classification as malicious. Users who visited vercelsync-ledger.com should assume their interactions were monitored or logged. Immediately revoke any permissions granted to browser extensions or applications linked to the domain. Reset Ledger device recovery phrases and passwords for associated accounts, using a secure, offline method. Monitor all linked cryptocurrency wallets for unauthorized transactions and enable multi-factor authentication where available. Report the incident to Ledger’s official security team and consider filing a complaint with relevant cybercrime authorities.