co-web-ledger-live-login.typedream.app

Analysis of the domain co-web-ledger-live-login.typedream.app indicates a high-risk phishing threat primarily targeting the brand Ledger. This domain is currently active and has been flagged for brand impersonation. It resolves to the IP address 188.114.96.3, which is associated with infrastructure commonly used for hosting malicious content. The domain is registered through Typedream and appears on two security blocklists, specifically OpenPhish and PhishDestroy, underscoring the active recognition of its fraudulent nature by security community members. Additionally, a review of the domain on VirusTotal shows that it has been flagged by 10 out of 95 security vendors, further corroborating its malicious classification. The presence of an SSL certificate issued by Google Trust Services suggests that the domain may be employing secure connections to enhance its deceptive capabilities, which is a common tactic in phishing schemes to appear legitimate to potential victims. The technologies detected on the site include Node.js, React, and various Google Cloud services, indicating a sophisticated setup designed to lure users into providing sensitive information under the guise of a legitimate site. Defenders are advised to monitor for any user reports relating to phishing attempts that may originate from this domain, and to educate users on verifying URLs and recognizing signs of potential scams. Given the active status of this domain and its association with a high-risk threat, immediate action is recommended to mitigate the potential impact on users.