ledger-customer-care[.]com

PhishDestroy identifies ledger-customer-care.com as an active crypto_drainer domain posing as a Ledger customer support portal. This fraudulent domain is designed to trick cryptocurrency holders into entering their recovery phrases or private keys, enabling attackers to drain digital assets directly. The domain mimics legitimate support channels, exploiting urgency and trust associated with hardware wallet customer care. This domain was flagged by only 3 out of 95 VirusTotal security vendors as of the latest scan. OwnRegistrar, Inc. registered ledger-customer-care.com on March 26, 2026, just days before the campaign became active. The domain resolves to IP address 87.121.79.166 and holds a valid SSL certificate issued by Let’s Encrypt, which increases its appearance of legitimacy. Despite its recent creation and low detection rate, the malicious intent is evidenced by its classification as a crypto_drainer tool designed to steal cryptocurrency. If you visited ledger-customer-care.com, assume your sensitive data may have been exposed. Immediately revoke any entered recovery phrases or private keys and transfer remaining funds to a clean wallet. Monitor your accounts for unauthorized transactions and consider revoking browser or app permissions granted to this domain. Report the domain to your antivirus provider and relevant platforms (e.g., IC3, Chainalysis). Do not reuse passwords or recovery phrases across services. Consider using hardware wallets with offline signing to minimize future exposure.