support---legderlive-us--learn[.]typedream[.]app

PhishDestroy has identified an active phishing domain posing as a LegderLive support portal at support---legderlive-us--learn.typedream.app. This domain mimics the legitimate Ledger Live support structure to deceive cryptocurrency users into revealing sensitive account credentials or payment information. The threat actor has deployed a spoofed support interface designed to harvest user data under the guise of troubleshooting assistance, creating a high-risk scenario for individuals seeking legitimate support channels. This domain presents multiple technical indicators confirming its malicious nature. According to security analysis, VirusTotal identified 20 out of 95 security vendors flagging this domain as malicious, while OpenPhish has already blocked it. The domain resolves to IP address 188.114.97.3 and operates under a Google Trust Services SSL certificate to appear legitimate. Security investigations reveal this domain has appeared on at least 1 established blocklist, indicating widespread recognition of its fraudulent nature. The unique seed identification 02ef19 confirms its categorization within PhishDestroy’s threat intelligence database as an active phishing campaign targeting cryptocurrency users. Users who have encountered this domain should immediately cease any interaction and avoid providing credentials or personal information. If you have already visited this site, change your Ledger Live account password immediately and enable two-factor authentication. Review your account activity for unauthorized transactions and consider revoking any API keys or permissions granted to suspicious domains. Report this incident to Ledger’s official support channels and file a complaint with relevant cybercrime units. Maintain vigilance for follow-up phishing attempts and educate yourself on identifying legitimate Ledger support channels to prevent future exposure.