us-conect-ledger-live-login[.]typedream[.]app

PhishDestroy identifies the domain us-conect-ledger-live-login.typedream.app as an active brand-impersonation site targeting Ledger users. This malicious page masquerades as the official Ledger Live login portal, attempting to harvest cryptocurrency wallet credentials and seed phrases. Once obtained, attackers can drain digital assets or lock users out of their accounts, resulting in irreversible financial loss. The site’s deceptive naming—using “us-conect” and “ledger-live-login”—is designed to trick visitors into believing they are accessing a legitimate service. This domain was flagged by 21 out of 95 security vendors on VirusTotal, indicating elevated risk and community-wide suspicion. The site resolves to IP address 188.114.97.3, a known hosting infrastructure associated with malicious campaigns. Registered through a privacy-protected service, the domain shows recent creation and active deployment, with no legitimate affiliation to Ledger SAS or its official domains such as ledger.com or ledger-live.com. If you visited us-conect-ledger-live-login.typedream.app, immediately cease any interaction and do not enter any wallet passwords, recovery phrases, or private keys. Disconnect from the internet if possible. Scan your device with updated antivirus software and consider revoking any session tokens or API keys exposed during the visit. Report the domain to Ledger’s official support and your local cybercrime unit. If you entered sensitive data, transfer remaining funds to a new, secure wallet as soon as possible and enable two-factor authentication on all related accounts. Stay vigilant: always verify URLs and use bookmarked links or official apps for cryptocurrency services.