e7-ledger-livelogin-battery-support[.]vercel[.]app

This domain, e7-ledger-livelogin-battery-support.vercel.app, is flagged as a high-risk brand impersonation targeting Ledger hardware wallet users. Analysis indicates the page mimics the official Ledger interface, presenting itself under the title 'Ledger® Hardware Wallet | Secure Your Crypto Assets,' with the intent to deceive users into disclosing sensitive credentials or transferring cryptocurrency assets. No explicit drainer kit signatures were identified in initial scans, though the infrastructure aligns with common cryptocurrency phishing tactics observed in prior campaigns. Infrastructure analysis reveals the domain was registered through Vercel and resolves to the IP address 216.198.79.67, hosted under Cypress Communications, LLC in the United States. The domain was created on May 6, 2026, and is currently detected by 15 out of 95 security vendors on VirusTotal. It appears on one security blocklist, and while Google Safe Browsing status remains unconfirmed, the SSL certificate is issued by Google Trust Services (WR1). These indicators collectively suggest a deliberately constructed phishing environment designed to exploit trust in the Ledger brand. As of the latest assessment, the domain remains active and unmitigated, posing a continued risk to users. Response actions should include immediate reporting to hosting providers for takedown, dissemination of indicators to threat intelligence platforms, and user education on verifying domain authenticity before interacting with cryptocurrency-related services. The remaining risk is classified as high due to the domain's operational status and the potential for financial loss among targeted victims.