wallet-support-ledger-livenanox-cdn[.]vercel[.]app

The domain wallet-support-ledger-livenanox-cdn.vercel.app is currently classified as an active crypto drainer infrastructure with an elevated risk rating. Automated analysis on VirusTotal shows that 15 of 91 security vendors flag the domain as malicious, indicating a non‑trivial consensus among scanners. The domain is listed on a single public blocklist and has been actively blocked by the PhishDestroy mitigation service, confirming that at least one upstream filter is already denying traffic to it.

No additional public intelligence such as registrar details, hosting IP address, SSL certificate information, Safe Browsing verdict, or page title has been released, so the broader hosting environment remains opaque. The limited visibility suggests that the operators may be leveraging a generic cloud‑hosting provider without custom domain registration artifacts, a pattern frequently observed in fast‑flux or disposable phishing campaigns. Defenders should ensure that the domain is added to local deny lists, enforce outbound filtering to block HTTP/S requests to the host, and monitor DNS logs for any resolution attempts.

Continuous re‑scanning on multi‑engine platforms is advised, as further detections could surface additional indicators of compromise. Given the active blocking by PhishDestroy and the presence on a blocklist, the domain already exhibits sufficient evidence of malicious use to justify immediate remediation in enterprise environments.