leedger-live-us[.]weebly[.]com

The domain leedger-live-us.weebly.com has been identified as an active brand impersonation site targeting Ledger users. This fraudulent domain masquerades as the official Ledger Live service, likely to deceive victims into entering sensitive credentials or cryptocurrency wallet information into a malicious drainer kit. The site exhibits high-risk behavior consistent with crypto drainer operations, which are designed to siphon funds from unsuspecting users by mimicking legitimate financial platforms.

Forensic analysis reveals several critical technical indicators associated with this domain. PhishDestroy’s investigation shows that the domain was registered through MarkMonitor Inc., a well-known registrar often exploited for impersonation campaigns. The domain resolves to IP address 74.115.51.9 and was created on March 29, 2006, a date that predates its current malicious use. The SSL certificate, issued by Let’s Encrypt, adds a veneer of legitimacy, potentially lulling users into a false sense of security. Security vendor detection stands at 11 out of 95 on VirusTotal, indicating that while multiple engines have flagged the domain, a significant portion of the security community remains unaware of its malicious nature. Additionally, this domain has not been flagged by Google Safe Browsing (GSB) as of the latest check, and it is currently included in 13 known blocklists, underscoring its widespread malicious reputation.

The domain remains actively hosted and accessible, posing an ongoing threat to users who may inadvertently visit the site. PhishDestroy has flagged this domain as active and elevated risk, and it is recommended that users block access to leedger-live-us.weebly.com at the network level to prevent further exposure. While immediate action can mitigate some risks, the long-term threat persists due to the domain’s age and the potential for continued abuse. Users are strongly advised to verify any domain claiming to represent Ledger against PhishDestroy’s database and to exercise heightened caution when entering sensitive information online.