live-leddger[.]weebly[.]com

The domain live-leddger.weebly.com was identified as a brand impersonation threat specifically targeting Ledger, a cryptocurrency hardware wallet provider. Analysis confirms the domain hosted a fraudulent replica of the Ledger Live application interface, designed to deceive users into disclosing sensitive credentials or authorizing malicious transactions. The page title, "Ledger Live - Secure Crypto Management - Ledger Live - Secure Crypto Management," directly mirrors legitimate Ledger branding, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals the domain was registered through MarkMonitor Inc. and resolved to the IP address 74.115.51.8. The domain creation date is listed as April 27, 2026, though this appears anomalous given the current detection timeline, suggesting potential inaccuracies in WHOIS records or domain spoofing. The site was hosted on Weebly, with backend technologies including MySQL, PHP, and Amazon Web Services, alongside client-side components such as jQuery and Google Analytics. Security vendors flagged the domain on 3 distinct blocklists, while 13 of 95 VirusTotal engines classified it as malicious. The SSL certificate was issued by Let’s Encrypt, a common tactic to lend superficial legitimacy to phishing infrastructure. A Gridinsoft trust score of 0/100 further corroborates the high-risk classification. As of the latest verification, live-leddger.weebly.com has been taken offline, likely following takedown requests or hosting provider intervention. However, the infrastructure and tactics observed align with persistent threats targeting cryptocurrency users. Organizations and individuals are advised to monitor for similar domains leveraging Weebly or other free hosting platforms to impersonate Ledger or other crypto-related services. Network-level blocking of the resolved IP (74.115.51.8) and associated indicators is recommended. Users should verify domain authenticity through official channels before interacting with any Ledger-related services and enable multi-factor authentication on all cryptocurrency accounts.