accss-ledger-public[.]typedream[.]app

This domain, accss-ledger-public.typedream.app, has been flagged as a Ledger brand impersonation operating a crypto‑scam. The site returned HTTP 403 and presents a Cloudflare “Suspected phishing site” page title, indicating that the hosting provider has taken it offline. The SSL certificate is issued by Google Trust Services under the WE1 identifier, confirming that TLS termination is performed by Google infrastructure. Infrastructure analysis shows the site was built with Node.js, React, Next.js, and served through Google Cloud CDN and Cloudflare, with Webpack bundling the assets.

The domain resolves to IP 188.114.96.3, located in the United States and owned by AS13335 Cloudflare, Inc. Nameservers annalise.ns.cloudflare.com and darwin.ns.cloudflare.com are configured, and registration was handled by Squarespace Domains II LLC on 22 January 2021. Reputation data is extremely poor: Scamadviser assigns a trust score of 1 out of 100, and the domain appears on one security blocklist. VirusTotal scans recorded 18 detections out of 95 antivirus engines, reinforcing the malicious assessment. PhishDestroy has also listed the domain as blocked.

The available evidence points to a deliberate attempt to exploit Ledger’s brand reputation to lure cryptocurrency users, but the site’s current offline status limits further content analysis. Defenders should immediately block the domain and its resolving IP at perimeter and endpoint layers, ensure that any detection rules referencing the identified SSL issuer or the specific technology stack are tuned to catch similar copies, and monitor for new subdomains under typedream.app that may reuse the Ledger brand. Ongoing watch of registration patterns from the same registrar and of Cloudflare‑hosted assets is recommended to pre‑empt re‑deployment.