get-live-leddgr[.]weebly[.]com

PhishDestroy has identified get-live-leddgr.weebly.com as a live-event scam domain actively impersonating legitimate event platforms to harvest user credentials and payment details. This domain leverages a deceptive Weebly-hosted page to mimic live event registration portals, tricking visitors into submitting sensitive information under false pretenses. The threat actor behind this campaign exploits the familiarity of live event platforms to lower user suspicion and increase the likelihood of successful credential theft and fraud. Given its active status and lack of current detection, this domain poses a credible risk to unsuspecting users seeking event tickets or exclusive access. This domain, registered through MarkMonitor Inc. on March 29, 2006, resolves to IP address 74.115.51.9 and utilizes a Let's Encrypt SSL certificate to appear legitimate. Currently, VirusTotal reports 0 detections out of 95 antivirus engines, indicating this domain has not yet been widely flagged despite its malicious intent. The domain's age and reputable registrar status may contribute to its stealth, but technical indicators such as the unsolicited live-event theme and unsanctioned Weebly subdomain should raise red flags for security-conscious users. Additionally, its low detection rate suggests that traditional security tools may not yet recognize this as a threat, increasing the risk of successful exploitation. Users who have visited this domain should immediately cease any interaction with the page, including refraining from entering personal or payment details. If credentials or sensitive information were submitted, users must reset passwords for affected accounts and enable multi-factor authentication where possible. Organizations should block this domain at the network level using the IP address 74.115.51.9 and domain get-live-leddgr.weebly.com to prevent further access. Reporting this domain to your security team or via threat intelligence platforms can help enhance collective defense. Remain vigilant for follow-on phishing attempts, as compromised credentials may be leveraged in subsequent attacks. The seed d1cc7e has been assigned to track this evolving threat.