xverseapp[.]xyz

The domain xverseapp.xyz is a confirmed phishing site engaged in brand impersonation targeting Ledger, a well-known cryptocurrency hardware wallet provider. It presents itself as the 'Xverse - Best Bitcoin Web3 Wallet for Android, iOS & Chrome' to deceive users into believing it is a legitimate wallet service, with the intent to steal cryptocurrency assets. As of the latest verification, xverseapp.xyz has been taken offline, but it previously operated as an elevated-risk scam without an associated drainer kit.

Technical indicators confirm the malicious nature of xverseapp.xyz. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Forcepoint ThreatSeeker. It appears on 4 security blocklists, specifically PhishDestroy, Polkadot, Enkrypt, and Codeesura. The domain was created on February 21, 2026, and resolved to the IP address 77.47.142.77, located in Ukraine under AS3319. The SSL certificate was issued by R3. Trust scores from Gridinsoft and Scamadviser are 0/100 and 1/100, respectively, further indicating its fraudulent purpose.

Users who interacted with xverseapp.xyz should immediately revoke any token approvals and transfer funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to relevant platforms such as Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in takedown efforts and protect others from similar scams.