require-ledger[.]com

The domain require-ledger.com has been identified as a brand impersonation phishing domain specifically targeting Ledger cryptocurrency wallet users. This domain is now offline, but while active it posed a high risk to users seeking Ledger support or services. The threat type is a crypto drainer, designed to trick visitors into connecting their wallets and surrendering private keys or signing malicious transactions.

Analysis of the domain reveals it was flagged by 14 out of 95 VirusTotal security vendors, indicating broad consensus on its malicious nature. It appears on three security blocklists and was found in one AlienVault OTX threat intelligence pulse. The domain was created on November 02, 2025, and registered through Dominet (HK) Limited, a registrar often associated with suspicious domains. It resolved to IP address 80.66.87.123 and had no SSL certificate, further indicating its lack of legitimacy. These technical indicators, combined with the domain's explicit impersonation of Ledger, confirm its purpose as a phishing and crypto-draining operation.

The domain has been taken offline, but users should remain vigilant. PhishDestroy recommends that anyone who interacted with require-ledger.com immediately change their Ledger-related passwords and enable two-factor authentication. Never connect your hardware wallet to unknown websites, and always verify URLs through official Ledger channels. If you suspect your Ledger device was compromised, transfer funds to a new seed phrase immediately. Stay safe by bookmarking official websites and avoiding unsolicited links.