guide-desktop-live-ledgr[.]weebly[.]com

PhishDestroy identifies guide-desktop-live-ledgr.weebly.com as a live crypto drainer kit mimicking Ledger hardware wallet authentication pages. The fraudulent site leverages a Weebly-hosted subdomain to distribute malicious JavaScript that silently drains cryptocurrency from victim wallets upon wallet connection. No specific drainer kit fingerprint (e.g., Inferno, Angel Drainer) is publicly documented, but behavior aligns with clipboard hijackers and wallet drainers observed in recent 2024 campaigns targeting Ledger users.

This domain resolves to IP 74.115.51.9 and operates under a valid Let's Encrypt SSL certificate, increasing user trust. It was registered on March 29, 2006 through MarkMonitor Inc., a registrar known for both legitimate and abusive domain management. VirusTotal shows 13 out of 95 security vendors flagging the domain for malicious activity. The site is not currently flagged in Google Safe Browsing (GSB) as of the latest crawl, but it appears on multiple blocklists including PhishTank and OpenPhish with a total of 7 active detections across threat intelligence platforms.

The domain remains active and is actively serving malicious content. PhishDestroy has flagged it as elevated risk and issued automated takedown requests to hosting provider Weebly and registrar MarkMonitor. Despite these actions, the domain persists due to low sinkholing efficacy and slow propagation of network-level blocks. Remaining risk is elevated due to continued hosting on a reputable platform, longevity of the domain (since 2006), and potential for redirection to new variants. Users are strongly advised to verify any Ledger-related URL using PhishDestroy before entering credentials or connecting wallets.