en-t-r-e-z-r-io-login[.]typedream[.]app

This domain presents a high-risk brand impersonation threat, specifically a fake login page designed to steal credentials from Ledger hardware wallet users. The page title 'Ledger® Login® (en-US) | Ledger Support' mimics official Ledger support interfaces to deceive visitors into entering sensitive account information.

Infrastructure analysis reveals the domain resolves to IP 188.114.96.3, hosted behind Cloudflare with an SSL certificate issued by Google Trust Services. VirusTotal detection shows 1 out of 95 security vendors flagging this domain, indicating low initial visibility but active malicious intent. The registrar is not specified, but the domain remains active and reachable. No creation date is provided, but the current operational status confirms ongoing threat activity. Trust scores are not available, but the single VT detection suggests limited blocklisting.

Mitigation steps specific to this threat include: never entering Ledger credentials on this domain; reporting the site to Ledger's security team and relevant hosting providers; blocking the domain at the network level; and educating users to always verify official URLs via Ledger's verified channels. Users who have already interacted with the site should immediately change their Ledger credentials and enable two-factor authentication.