connect-ledger-ca[.]typedream[.]app

Analysis of the domain connect-ledger-ca.typedream.app indicates active involvement in a crypto‑drainer operation. The site is currently live and resolves to the IP address 188.114.96.3. Threat intelligence from VirusTotal shows that 15 of 95 scanning engines have flagged the domain as malicious, providing a moderate confidence signal that automated detection tools recognize malicious behavior. DNS interrogation returns a placeholder status of NS_NOT_FOUND, suggesting that the authoritative name servers are either misconfigured or intentionally hidden, a common tactic to impede forensic tracing.

The domain is listed on a single public security blocklist, confirming that at least one external monitoring service has identified it as abusive. Registration details reveal that the domain was created through the Typedream platform, which is typically used for rapid website deployment and can be abused to host fraudulent pages with minimal overhead. PhishDestroy, a dedicated anti‑phishing feed, has already added the domain to its blocklist, indicating that the threat community is actively curating defenses against it.

No additional metadata such as SSL certificates, HTTP response codes, or page titles are presently available, leaving the visual or functional characteristics of the site unverified. Defenders should immediately block the domain and its resolved IP address at network perimeters, incorporate the domain into DNS sinkhole policies, and monitor for outbound connections to 188.114.96.3. Continuous re‑scanning with multi‑vendor engines is advisable to capture any evolution in the site’s behavior, and organizations should flag any internal traffic attempts to the domain as potential crypto‑drainer exposure.