acces-ldgr-com-strt[.]weebly[.]com

PhishDestroy identifies acces-ldgr-com-strt.weebly.com as a live credential theft phishing domain masquerading as Ledger’s official login portal to harvest crypto wallet keys and drain digital assets. This under-investigation threat leverages brand impersonation to trick users into entering recovery phrases or private keys, a technique increasingly favored by threat actors targeting cryptocurrency holders. The domain resolves to IP 74.115.51.9 via Let’s Encrypt-validated SSL and was registered through MarkMonitor on March 29, 2006, suggesting long-term abuse potential under legitimate infrastructure.

The domain remains undetected on VirusTotal with 12/95 engines flagging the threat as of the latest scan. This unusually low detection rate may indicate recent activation or evasion tactics, such as fast-flux hosting or delayed payload delivery. The registrar MarkMonitor is a legitimate service provider, complicating takedown efforts due to bulk privacy protections. The domain’s age belies its current malicious intent, with the impersonation of Ledger—a leading brand in hardware wallets—indicating a high-risk campaign targeting crypto investors.

If you or your organization accessed acces-ldgr-com-strt.weebly.com or entered any credentials, immediately revoke wallet permissions via your hardware device or software wallet, transfer remaining funds to a new cold wallet, and scan your system for malware using up-to-date antivirus tools. Report the domain to your IT security team, crypto exchanges, and platforms like PhishDestroy to aid in global blocking. Forward any suspicious wallet interactions or transactions to law enforcement cyber units. Users should enable two-factor authentication and use only official Ledger domains (ledger.com) for all device management.