ledger-login-us-wallet[.]vercel[.]app

The domain ledger-login-us-wallet.vercel.app is a high-risk brand impersonation site designed to trick users into believing they are accessing a legitimate Ledger login page. The site poses a significant threat by attempting to steal sensitive information such as login credentials and personal details, which can be used for fraudulent activities.

Analysis indicates that this domain has been flagged by 19 out of 95 security vendors on VirusTotal, a clear sign of its malicious intent. The domain was registered through Vercel Inc. and used an SSL certificate issued by Google Trust Services / WR1, which might give a false sense of security. It has also appeared on two security blocklists, PhishDestroy and PhishingDB, and has been flagged by Google Safe Browsing as a phishing site. The domain resolves to the IP address 216.198.79.67, located in the United States under the AS16509 network operated by Amazon.com, Inc.

If a user has visited this domain, it is crucial to take immediate action to secure their accounts. The first step is to change the passwords for any Ledger accounts and any other accounts where the same password might have been used. Users should also monitor their financial statements and credit reports for any unauthorized activity. It is recommended to report the incident to Ledger's support team and to their bank or financial institution if sensitive information was compromised.