ledggr-live-io[.]weebly[.]com

PhishDestroy identifies ledggr-live-io.weebly.com as a high-risk domain masquerading as the official Ledger cryptocurrency wallet platform. This site employs brand impersonation to deceive users into revealing sensitive wallet recovery phrases, private keys, or seed phrases under the false pretense of troubleshooting or security updates. The threat actor likely intends to drain cryptocurrency funds directly from victims' wallets connected to the site. Ledger users should remain cautious, as legitimate support channels never request seed phrases or private keys via websites or unsolicited communications. This domain was flagged after analysis revealed several red flags, including 0 detections on VirusTotal from 95 security vendors, indicating it has evaded most automated detection tools. The domain ledggr-live-io.weebly.com was registered through MarkMonitor Inc., a reputable registrar often targeted by threat actors for malicious domains due to its reliability and lack of stringent fraud prevention measures. Additionally, the domain resolves to IP address 74.115.51.9, which has no prior associations with legitimate Ledger services. The site also utilizes a Let's Encrypt SSL certificate, a common tactic to appear trustworthy to unsuspecting users. Notably, the domain was created on March 29, 2006, which may suggest either a long-standing legitimate site that has been compromised or a deliberate attempt to appear older and more legitimate. If you have visited ledggr-live-io.weebly.com or entered any information, immediately disconnect your device from the internet to prevent further data exfiltration. Next, revoke any permissions granted to the site within your browser settings. If you provided a wallet recovery phrase, seed phrase, or private key, transfer your remaining funds to a newly generated wallet address on a trusted device to prevent theft. Report the incident to Ledger's official support and consider filing a complaint with your local cybercrime unit. Always verify website URLs carefully and use bookmarked links to official Ledger domains to avoid similar impersonation scams.