ledgelive-io[.]created[.]app

PhishDestroy identifies ledgelive-io.created.app as an elevated-risk threat, specifically a brand impersonation of Ledger, the cryptocurrency hardware wallet company. This fraudulent domain was designed to trick users into believing they are accessing the legitimate Ledger Live platform, potentially leading to credential theft or crypto drainer attacks. Although the site is currently offline, its infrastructure and history indicate a clear intent to deceive.

Technical analysis reveals that the domain was registered on July 12, 2023, through Tucows Domains Inc., and resolves to IP address 216.150.1.1. It uses a Let's Encrypt SSL certificate (issued by R13), which is common among phishing sites. VirusTotal reports that 10 out of 95 security vendors flag this domain as malicious, and it appears on one security blocklist. The page title was "Ledger Live – The Trusted App for Managing Your Ledger," a direct copy of the legitimate app's branding.

Users should never visit or enter any credentials on such domains. For those who may have interacted with ledgelive-io.created.app, it is critical to change Ledger-related passwords immediately, enable two-factor authentication, and monitor accounts for unauthorized transactions. Always verify URLs by typing them directly into the browser and bookmarking official pages. Report any suspected phishing sites to Ledger's security team.