walet-live[.]zapier[.]app

Analysis indicates that the domain walet-live.zapier.app was registered on March 12 2026 through Name.com, Inc. and is hosted on Amazon Web Services infrastructure identified by ASN 16509, belonging to Amazon.com, Inc., with the public IP address 64.239.109.193 located in the United States. DNS resolution points to Vercel name servers (ns1.vercel-dns.com, ns2.vercel-dns.com). The site presents a TLS certificate issued by Let’s Encrypt (R12), confirming the use of standard HTTPS encryption. An HTTP request to the root URL returns a 404 status code, and the page title reported by the scanner is “Ledger® Live Wallet Getting”, linking the content to the Ledger brand. The observed technology stack includes AWS services, Vercel deployment, Stripe integration, reCAPTCHA challenge, HTTP Strict Transport Security (HSTS), and Amazon S3 storage, all of which are typical of legitimate services but can also be leveraged by malicious actors.

The domain appears on a single security blocklist and has been actively blocked by PhishDestroy, indicating that at least one defensive feed has recognized it as malicious. VirusTotal reports that the domain was scanned by 94 vendors with no detections; however, the absence of detections does not constitute evidence of safety. The classification provided is “brand impersonation” with the specific target being Ledger, suggesting that the operator may be attempting to harvest credentials or otherwise misuse the Ledger brand. Current operational status is listed as offline, and the risk level remains under investigation.

Uncertainty remains regarding the exact payload or user‑interaction flow, as no additional content has been captured beyond the page title. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the host, and consider adding the domain to internal blocklists. Ongoing observation of associated IP address 64.239.109.