ledgerliveappstartwebconect[.]typedream[.]app

The domain ledgerliveappstartwebconect.typedream.app is currently under investigation as a brand impersonation threat targeting Ledger. As of the latest assessment, the domain is offline.

Analysis indicates that the domain was created on January 22, 2021, and resolves to the IP address 188.114.97.3. It has been flagged by 1 out of 95 vendors on VirusTotal, indicating a low level of detection. The domain is registered through Squarespace Domains II LLC and utilizes an SSL certificate issued by Google Trust Services / WE1. Despite its current offline status, the domain appears on a single security blocklist, which suggests it has been involved in suspicious activities in the past.

Given the current offline status of the domain, the immediate threat is mitigated. However, it is recommended that organizations and individuals remain vigilant and avoid visiting or interacting with this domain until a comprehensive investigation confirms its safety. Security teams should monitor the domain for any signs of reactivation and consider adding it to internal blocklists to prevent potential future attacks. Additionally, users should verify the authenticity of any communication claiming to be from Ledger by directly accessing the official Ledger website or contacting Ledger support through verified channels.