# faq-login-ledgerlive.dream.space — SUSPICIOUS

> Domain faq-login-ledgerlive.dream.space is a crypto drainer phishing site impersonating Ledger. It is flagged by 4 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies faq-login-ledgerlive.dream.space as an active crypto drainer domain impersonating the Ledger brand. This domain is currently leveraging a spoofed Ledger Live login page to deceive users into surrendering their cryptocurrency credentials. The site is hosted under a recently registered domain and exhibits elevated risk due to its targeted phishing tactics aimed at Ledger users.  This domain was flagged by 4 of 95 VirusTotal security vendors, indicating partial detection coverage but not universal consensus on its malicious nature. It was registered on November 08, 2024, through GoDaddy.com, LLC, and resolves to IP address 104.18.21.20. The domain utilizes a Google Trust Services SSL certificate to appear legitimate, while its recent creation and low blocklist count suggest an emergent threat. The page title mimics official Ledger branding to enhance credibility.  Users are strongly advised to avoid interacting with this domain and to verify any Ledger-related login pages using PhishDestroy’s real-time database. This domain should be treated as untrustworthy, and any cryptocurrency accounts accessed via this site should be considered compromised. Report this domain immediately to your security team or through PhishDestroy’s threat submission portal to prevent further exploitation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger
- Page title: Ledger Live Login | Secure Access to Your Crypto Dashboard

## Domain Intelligence
- Registered: 2024-11-08 11:42:24
- Registrar: GoDaddy.com, LLC
- IP: 104.18.21.20

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/faq-login-ledgerlive.dream.space
- PhishDestroy: https://phishdestroy.io/domain/faq-login-ledgerlive.dream.space/
- LLM endpoint: https://phishdestroy.io/domain/faq-login-ledgerlive.dream.space/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/faq-login-ledgerlive.dream.space/
Last updated: 2026-04-04