ledger-crypto-wallet-official[.]com

PhishDestroy identifies ledger-crypto-wallet-official.com as an active crypto drainer masquerading as the official Ledger wallet site. The threat is severe: any user who connects a cryptocurrency wallet to this site risks having all assets silently drained via malicious JavaScript injected in the browser. Unlike traditional phishing pages that rely on stolen credentials, crypto drainers exploit wallet connection signatures to authorize unauthorized transactions without ever needing your private keys. Victims often realize the theft only after checking balances and finding digital assets irretrievably transferred to attacker-controlled wallets. This domain was flagged on February 24, 2026—just days ago—and is already live at IP 104.21.76.184, registered through Hello Internet Corp using a Let's Encrypt SSL certificate. VirusTotal currently shows zero detections (2/95 scanners), which is typical for newly launched malicious sites that fly under antivirus radar before signatures are updated. Its short operational window and low detection rate make it especially dangerous: users cannot rely on browser warnings or security tools to block access in time. The domain uses a plausible name to impersonate Ledger’s legitimate site, adding credibility for social engineering attacks via fake ads or support scams. If you visited ledger-crypto-wallet-official.com, disconnect your wallet immediately using your wallet’s “disconnect” or “revoke access” feature. Do not interact with any transaction prompts or signature requests. Clear your browser cache and consider revoking any active wallet connections via tools like revoke.cash. Report the domain to your antivirus vendor and browser safety programs. Monitor all wallet addresses for unauthorized outbound transactions and notify your service provider if any tokens were moved. Avoid similar-looking domains; always verify URLs via Ledger’s official channels before any wallet interaction.