get-leddger-live[.]weebly[.]com

PhishDestroy identifies an active brand-impersonation campaign targeting Ledger users via the domain get-leddger-live.weebly.com. This site poses as the official Ledger Live platform, likely to harvest wallet credentials or deploy a crypto-asset drainer. The threat is currently flagged as UNDER_INVESTIGATION due to newly observed infrastructure with low detection coverage and ongoing behavioral analysis.

This domain was registered on March 29, 2006, through MarkMonitor Inc., resolving to IP 74.115.51.8 and secured with a Let’s Encrypt SSL certificate. VirusTotal shows 11 out of 95 engines detecting this threat, indicating low signature-based detection at the time of analysis. The domain is hosted on Weebly’s platform, a common site builder leveraged in quick-turn credential phishing pages. No active listings were found on major public blocklists (e.g., Google Safe Browsing, PhishTank, OpenPhish) as of this report. Domain trust scores remain near neutral due to minimal historical typosquatting incidents and lack of reputation decay.

Given the tactics, users are advised to avoid clicking links from unsolicited emails or social media posts referencing 'Ledger Live.' Always navigate directly to ledger.com and enable Ledger’s official app verification processes. Enable hardware wallet security features like passphrase protection and transaction confirmation on-device. For immediate validation, run the domain through PhishDestroy’s real-time scanning tool. Report any exposure to support@phishdestroy.com with transaction hashes if funds are at risk. Continuous monitoring is recommended due to the low VT detection and potential for rapid evolution in payload delivery.