liveledgre-aap-en[.]weebly[.]com

PhishDestroy identifies an active credential theft campaign operated from the domain liveledgre-aap-en.weebly.com, which mimics legitimate service branding to harvest cryptocurrency wallet credentials. This Weebly-hosted page is designed to deceive users into entering private keys, seed phrases, or login details under the guise of a routine authentication step. The threat actor leverages familiar branding cues to bypass suspicion, making it critical for users to verify URLs and avoid unsolicited login prompts. This domain was flagged by PhishDestroy with the following confirmed indicators: it resolves to IP 74.115.51.9, carries a Let's Encrypt SSL certificate, and remains undetected by antivirus engines (0 detections out of 95 on VirusTotal). Registered through MarkMonitor, Inc. on March 29, 2006, this long-standing domain may be leveraged for legitimacy through age, despite its current malicious use. Its presence on blocklists remains low, indicating a recently escalated threat not yet widely recognized. Users who visited this domain should immediately revoke any exposed credentials, transfer funds from linked wallets to new, isolated addresses, and perform a full system scan using updated antivirus tools. Disable browser autofill for crypto wallets, enable two-factor authentication on all exchange and wallet accounts, and report the domain to your security team or relevant abuse channels. Monitor wallet transactions closely for unauthorized transfers and consider using hardware wallets for enhanced protection against future credential harvesting attempts.