ledger-live-download-conect-web[.]typedream[.]app
“Ledger Live Download |Supported Platforms & Portfolio Manager — ledger”
ledger-live-download-conect-web.typedream.app — 未验证. 品牌冒充:Ledger; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 17/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, ESET); URLQuery 100 det.; URLScan malicious verdict; CF Radar malicious; PhishDestroy score 95/100. 注册商: Squarespace Domains II.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain ledger-live-download-conect-web.typedream.app is flagged under brand impersonation targeting Ledger with a cryptocurrency scam classification. It was registered on January 22 2021 through Squarespace Domains II LLC and currently resolves to IP address 188.114.96.3 hosted in the United States under AS13335 Cloudflare Inc. The domain uses nameservers annalise.ns.cloudflare.com and darwin.ns.cloudflare.com. Its SSL certificate is issued by Google Trust Services WE1 and the HTTP status code returned is 200. The page title matches Ledger Live Download Supported Platforms Portfolio Manager ledger exactly.
Technical detections include Node.js React Google Cloud Next.js Google Cloud Trace Google Cloud CDN cdnjs and Cloudflare. The domain appears on exactly two security blocklists PhishDestroy and PhishingDB. VirusTotal reports 15 detections out of 95 vendors and the Gridinsoft trust score stands at 0 out of 100. The site remains active as of the report date July 12 2026.
Analysis indicates the combination of cryptocurrency scam labeling, exact brand match in the recorded title, and multiple vendor flags supports high risk classification. The five-year registration age does not contradict the active malicious status since the domain is confirmed live and blocked by the listed sources. No page content beyond the title string has been examined.
Defenders should block the domain and its resolving IP 188.114.96.3 at network and endpoint layers. Monitor for any related domains sharing the same nameservers or Cloudflare infrastructure. Update internal threat intelligence feeds with the VirusTotal ratio and the two explicit blocklist entries to prevent credential or wallet exposure in cryptocurrency environments.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 10 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
JavaScript library for building user interfaces with component-based architecture.
Suite of cloud computing services running on Google infrastructure.
React framework for production with hybrid static and server rendering.
Content delivery network built on Google global edge infrastructure.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comModule bundler for modern JavaScript applications.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of ledger-live-download-conect-web.typedream.app · checked Mar 2, 2026
网站配置分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。