ledgr-live-web-login[.]typedream[.]app
“Ledger® Live Login® (en-US) | Ledger Support”
ledgr-live-web-login.typedream.app — 内容不可用. 品牌冒充:Ledger; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 17/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, Ermes); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 95/100. 注册商: Cloudflare.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain ledgr-live-web-login.typedream.app was registered on September 08, 2025 through Cloudflare, Inc. and remains active as of the July 12, 2026 report date. It resolves to IP address 188.114.97.3 and uses an SSL certificate issued by Google Trust Services. The page title Ledger Live Login en-US Ledger Support together with the documented brand target of Ledger establishes the impersonation classification. Infrastructure analysis reveals use of Node.js, React, Google Cloud, Next.js, Google Cloud Trace, Google Cloud CDN, cdnjs and Cloudflare Browser Insights.
Detection data shows a Gridinsoft trust score of 0/100. The domain appears on two security blocklists maintained by PhishDestroy and PhishingDB. VirusTotal reports indicate that 16 out of 95 security vendors flag the domain. These metrics collectively support the high-risk assessment assigned to the brand_impersonation threat type. No additional ASN or geolocation details are supplied in the available intelligence.
What remains uncertain is the precise content served at the time of any given visit, because the site itself has not been retrieved or inspected. The presence of the exact page title and brand target provides the primary evidence for impersonation without requiring visual confirmation. Defenders should treat the domain and its resolving IP 188.114.97.3 as confirmed indicators for blocking and monitoring purposes.
Recommended actions include adding the domain and IP to internal blocklists, sharing the indicators with threat-intelligence platforms, and reviewing logs for any connections originating from or directed toward 188.114.97.3. Continued observation of the domain status is warranted given its persistence since the September 2025 creation date. All findings rest exclusively on the supplied registration, detection and title data.
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 11 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
JavaScript library for building user interfaces with component-based architecture.
Suite of cloud computing services running on Google infrastructure.
React framework for production with hybrid static and server rendering.
Content delivery network built on Google global edge infrastructure.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comModule bundler for modern JavaScript applications.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of ledgr-live-web-login.typedream.app · checked Jul 12, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。