kryntledgerwallet[.]com

PhishDestroy identifies kryntledgerwallet.com as an active crypto drainer scam impersonating the legitimate Ledger hardware wallet brand. The domain leverages a spoofed wallet interface to trick users into connecting their crypto wallets, enabling unauthorized fund transfers. Domain registration details and SSL configuration suggest an attempt to appear legitimate, but behavioral analysis confirms malicious intent. The threat involves a crypto drainer kit designed to extract private keys or seed phrases under the guise of a wallet service. Domain kryntledgerwallet.com resolves to IP 188.114.96.3, was registered on November 13, 2025, and operates under Dynadot Inc. The domain remains undetected by VirusTotal (1/95 detections) and carries a Google Safe Browsing (GSB) status of unflagged. Despite low detection rates, the domain’s recent creation and active status pose an elevated risk to users seeking Ledger-related services. Current blocklist counts remain at zero, indicating limited exposure but high potential for rapid spread in crypto communities. As of this investigation, kryntledgerwallet.com remains active and has not been flagged by major security vendors. Response actions include ongoing monitoring and domain reputation analysis, with recommendations for users to verify any wallet-related domains via PhishDestroy before interaction. The remaining risk is classified as high due to the domain’s active status, impersonation of a trusted brand, and low detection rates. Users are advised to avoid interacting with this domain and report suspicious activity immediately.