ladger-livelogin-us-cdn[.]vercel[.]app

This domain, ladger-livelogin-us-cdn.vercel.app, poses a credential harvesting threat by impersonating Ledger, a hardware cryptocurrency wallet provider. The site replicates the official Ledger Live login interface, tricking users into entering sensitive account details such as recovery phrases, private keys, or passwords. Such attacks typically target cryptocurrency holders, aiming to gain unauthorized access to digital assets stored in Ledger wallets. The fraudulent page uses branding elements, including the Ledger logo and color scheme, to appear legitimate, increasing the likelihood of successful deception. Analysis indicates that the domain was registered through Vercel Inc., a platform commonly used for hosting static websites and front-end applications. As of the latest assessment, 19 out of 95 security vendors on VirusTotal have flagged this domain as malicious, reflecting a moderate-to-high detection rate. The domain resolves to the IP address 216.198.79.195, which is geolocated in the United States and associated with Amazon.com, Inc. (AS16509). The SSL certificate is issued by Google Trust Services, specifically the WR1 intermediate, which is consistent with legitimate sites but does not guarantee safety. The domain appears on two security blocklists and is blocked by PhishDestroy and PhishingDB, further confirming its malicious nature. Users who visited ladger-livelogin-us-cdn.vercel.app should assume their credentials or recovery phrases may have been compromised. Immediate action is required: revoke any active sessions linked to Ledger Live, reset passwords, and initiate a recovery phrase reset if applicable. Monitor all associated cryptocurrency wallets for unauthorized transactions and enable multi-factor authentication where possible. If sensitive information was entered, consider migrating assets to a new wallet with a fresh recovery phrase. Report the incident to Ledger’s official support channels and relevant cybersecurity authorities to aid in tracking and mitigating the threat.