livee-leedgor[.]weebly[.]com

The domain livee-leedgor.weebly.com is identified as a brand_impersonation threat specifically targeting Ledger, a recognized provider of hardware cryptocurrency wallets and related services. Analysis confirms the domain is currently offline, though prior activity exhibited characteristics consistent with fraudulent infrastructure designed to deceive users into believing they were accessing legitimate Ledger applications or support channels. Infrastructure analysis reveals multiple concrete indicators of malicious intent. The domain was flagged by 7 of 95 security vendors on VirusTotal, indicating detection by a significant portion of the threat intelligence community. It was registered through MarkMonitor Inc., a registrar commonly associated with both legitimate and malicious domains, and resolved to the IP address 74.115.51.9. The domain creation date of March 29, 2006, suggests an atypical pattern for phishing infrastructure, as such domains are often newly registered; however, this does not diminish the elevated risk level. Additionally, the domain appears on one security blocklist, further corroborating its classification as a threat. The page title, 'My SitLedger Live App® | Official Ledger Mobile & Desktop Applicatione - Home,' explicitly mimics Ledger’s official branding, reinforcing the impersonation vector. Current status indicates the domain has been taken offline, reducing immediate exposure risk. However, organizations and users are advised to treat any prior interactions with this domain as compromised. Concrete recommendations include monitoring for unauthorized access attempts linked to this infrastructure, revoking credentials or recovery phrases potentially exposed through this domain, and implementing domain-based blocking rules for livee-leedgor.weebly.com and associated IPs in perimeter security controls. Proactive threat hunting for related indicators, such as the resolved IP 74.115.51.9, is also recommended to identify potential lateral movement or persistent access within affected environments.