faq-login-ledgerlive[.]dream[.]space

PhishDestroy identifies faq-login-ledgerlive.dream.space as an active crypto drainer domain impersonating the Ledger brand. This domain is currently leveraging a spoofed Ledger Live login page to deceive users into surrendering their cryptocurrency credentials. The site is hosted under a recently registered domain and exhibits elevated risk due to its targeted phishing tactics aimed at Ledger users. This domain was flagged by 4 of 95 VirusTotal security vendors, indicating partial detection coverage but not universal consensus on its malicious nature. It was registered on November 08, 2024, through GoDaddy.com, LLC, and resolves to IP address 104.18.21.20. The domain utilizes a Google Trust Services SSL certificate to appear legitimate, while its recent creation and low blocklist count suggest an emergent threat. The page title mimics official Ledger branding to enhance credibility. Users are strongly advised to avoid interacting with this domain and to verify any Ledger-related login pages using PhishDestroy’s real-time database. This domain should be treated as untrustworthy, and any cryptocurrency accounts accessed via this site should be considered compromised. Report this domain immediately to your security team or through PhishDestroy’s threat submission portal to prevent further exploitation.