leaprecoveryapp[.]com

Domain leaprecoveryapp.com is identified as a generic phishing threat and is currently offline. The domain attempts to impersonate a habit-recovery application, as indicated by its page title "LEAP App | Break Free from Harmful Habits & Build a Balanced Life." No specific brand impersonation is identified beyond the generic wellness app theme. The domain's current status is taken offline, though its registration history and technical configurations suggest active malicious intent during its operational period.

Technical analysis reveals critical indicators: the domain is flagged by 2 of 95 VirusTotal security vendors and appears on 1 security blocklist. The Gridinsoft trust score is 0 out of 100, reflecting a high-risk assessment. The domain was created on April 18, 2025, and resolves to IP address 147.79.126.85. It is registered through HOSTINGER operations, UAB, and utilizes technologies including Bootstrap, LiteSpeed, Hostinger, and HTTP/3. AlienVault OTX reports the domain in 1 threat intelligence pulse, and PhishDestroy has it blocked. The domain's infrastructure, particularly the use of LiteSpeed and HTTP/3, suggests attempts to evade detection and improve performance for phishing campaigns.

Risk assessment is elevated based on the low trust score, the presence on multiple security lists, and the generic phishing classification. The domain is currently offline, which limits immediate user exposure but does not eliminate the risk of re-registration or related domains becoming active. Recommendations include blocking the domain at network and email gateways, monitoring for similar domains with the same IP (147.79.126.85) or registrar (HOSTINGER operations, UAB), and educating users about phishing attempts that combine wellness themes with credential harvesting. Organizations should review logs for any connections to this domain between its creation date and takedown.