fittings-valid-lei

SUSPICIOUS. The stated purpose is narrow and plausible, but the actual footprint is larger: a simple LEI validator routes through a paid remote service and asks users to download and run an unpinned helper that may receive a blockchain private key. Because the executable is not verifiably inspectable from the evidence and is entrusted with signing material, this should be treated as high supply-chain and credential-forwarding risk rather than confirmed malware.