nextblocksummit[.]com

The domain www.nextblocksummit.com is currently active and classified as a high‑risk brand‑impersonation site targeting Ledger. Infrastructure analysis shows the site resolves to IP 64.29.17.1, hosted within Amazon AS16509 and served through Vercel’s platform, as indicated by the presence of Vercel DNS records (ns1.vercel-dns.com, ns2.vercel-dns.com) and the detection of Vercel‑specific technologies. The site enforces HSTS and includes a Facebook Pixel, while TLS termination is provided by a Let's Encrypt R12 certificate. The domain was registered on 21 February 2026 via Name.com, Inc., and the HTTP response is a 301 redirect. Security telemetry records a Gridinsoft trust score of 0/100, a single detection from VirusTotal’s 93 scanners, and inclusion on one public blocklist. The site has been flagged by PhishDestroy. The page title "Ledger Conference California" aligns with the claimed Ledger impersonation, but the actual page content has not been examined, leaving the specific phishing mechanisms unknown. Defenders should block the domain at network perimeters, add it to threat intelligence feeds, and monitor for any related C2 or credential‑harvesting activity. Users should be warned that any unsolicited communications referencing a Ledger conference hosted at this URL are likely fraudulent.