Campaigns

Suspected cluster 4e4f2ab7bba1ACTIVE

BetaShared-infrastructure grouping of public detections. Not an attribution claim.

Domains

99 hosts

Active

Brands

First seen

Aug 07, 2026

Most recent detection

Aug 29, 2026

What these pages look like

start-web-en-ledger-live-login.typedream.app

web-conect-us-ledger-live-wallet.typedream.app

home-ledgrreliveapp.typedream.app

ledger-live-download-sso-conect.typedream.app

ledger-live-wallet-start-conect-us-en.typedream.app

support-ledgrcom-start-web.typedream.app

windows-ledger-live.typedream.app

sso-ledger-live-strt-ledger-support-cdn.typedream.app

Indicators

Domain	Brand	Score	Sources	Match	Status	First seen
1start-web-en-ledger-live-login.typedream.app	Ledger	03636	OpenPhish	06464	ACTIVE	2026-08-29
2web-conect-us-ledger-live-wallet.typedream.app	Ledger	03636	OpenPhish	06464	ACTIVE	2026-08-28
3home-ledgrreliveapp.typedream.app	Ledger	03939	OpenPhish	06060	ACTIVE	2026-08-29
4ledger-live-download-sso-conect.typedream.app	Ledger	03535	OpenPhish	05252	ACTIVE	2026-08-13
5ledger-live-wallet-start-conect-us-en.typedream.app	Ledger	03535	OpenPhish	05252	ACTIVE	2026-08-13
6support-ledgrcom-start-web.typedream.app	Ledger	03939	OpenPhish	05252	ACTIVE	2026-08-28
7windows-ledger-live.typedream.app	Ledger	04242	OpenPhishPhishTank	05252	ACTIVE	2026-08-29
8sso-ledger-live-strt-ledger-support-cdn.typedream.app	Ledger	04040	OpenPhish	05050	ACTIVE	2026-08-27
9trezor-login-us-auth-start.typedream.app	Trezor	03535	OpenPhish	04646	ACTIVE	2026-08-07

Why this confidence

58% suspected cluster

Link strength 28%

Evidence diversity 100%

Time compactness 98%

Strong-link share 5%

Size discount 100%

confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.

Evidence summary

9/9 same nameservers annalise.ns.cloudflare.com,darwin.ns.cloudflare.com

9/9 same apex typedream.app

9/9 same registrar Squarespace Domains II LLC.

8/9 similar name typedream

6/9 same TLS cert ab441e0ffa6b15dd7c83fe1fe0e35948cc4fafcbe4787eb2ec7c78bb57a9a4d6

Brands targeted

Ledger (8) Trezor (1)

Timeline (first seen)

Spread over 22 days

Aug 07 1

Aug 13 2

Aug 27 1

Aug 28 2

Aug 29 3

History

2026-09-08 created first tracked with 9 members

Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.

How the members connect

	1	2	3	4	5	6	7	8	9
1		64	60	44	44	52	52	50	44
2	64		58	46	46	52	52	50	44
3	60	58		39	39	50	52	50	39
4	44	46	39		52	31	31	31	46
5	44	46	39	52		31	31	31	46
6	52	52	50	31	31		52	50	31
7	52	52	52	31	31	52		50	31
8	50	50	50	31	31	50	50		31
9	44	44	39	46	46	31	31	31

Each cell is the relationship score between two members, numbered as in the Indicators table above. Hover a cell for the domains and the signals behind it.
20 of 36 possible pairs are directly linked. A blank cell only means those two are not linked directly, they can still belong to the cluster through a third member. A greyed-out cell is linked below the clustering threshold or by same-kit similarity - it did not form this cluster.

Relationships

start-web-en-ledger-live-login.typedream.app ↔ web-conect-us-ledger-live-wallet.typedream.app 64 first reproduced 2026-08-29

start-web-en-ledger-live-login.typedream.app web-conect-us-ledger-live-wallet.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same screenshot	visual	12.8	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
appeared together (24h)	temporal	6	-
same registrar	registration	4	-

Discounted observations

shared TLS SAN	tls	0.0	×0.80	cert_fingerprint_exact
similar colors	visual	0.0	-	screenshot_phash

home-ledgrreliveapp.typedream.app ↔ start-web-en-ledger-live-login.typedream.app 60 first reproduced 2026-08-30

home-ledgrreliveapp.typedream.app start-web-en-ledger-live-login.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
same screenshot	visual	8.0	×0.80
appeared together (24h)	temporal	6	-
same registrar	registration	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

home-ledgrreliveapp.typedream.app ↔ web-conect-us-ledger-live-wallet.typedream.app 58 first reproduced 2026-08-30

home-ledgrreliveapp.typedream.app web-conect-us-ledger-live-wallet.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
same screenshot	visual	8.0	×0.80
same registrar	registration	4	-
appeared together (72h)	temporal	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

ledger-live-download-sso-conect.typedream.app ↔ ledger-live-wallet-start-conect-us-en.typedream.app 52 first reproduced 2026-08-14

ledger-live-download-sso-conect.typedream.app ledger-live-wallet-start-conect-us-en.typedream.app

Signal	Category	Contributed	IDF
same screenshot	visual	12.8	×0.80
same nameservers	infra	11.2	×0.80
similar name	naming	10.0	-
same apex	infra	8.0	×0.80
appeared together (24h)	temporal	6	-
same registrar	registration	4	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

home-ledgrreliveapp.typedream.app ↔ windows-ledger-live.typedream.app 52 first reproduced 2026-08-30

home-ledgrreliveapp.typedream.app windows-ledger-live.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
appeared together (24h)	temporal	6	-
same registrar	registration	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

start-web-en-ledger-live-login.typedream.app ↔ support-ledgrcom-start-web.typedream.app 52 first reproduced 2026-08-29

start-web-en-ledger-live-login.typedream.app support-ledgrcom-start-web.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
appeared together (24h)	temporal	6	-
same registrar	registration	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

start-web-en-ledger-live-login.typedream.app ↔ windows-ledger-live.typedream.app 52 first reproduced 2026-08-29

start-web-en-ledger-live-login.typedream.app windows-ledger-live.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
appeared together (24h)	temporal	6	-
same registrar	registration	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

support-ledgrcom-start-web.typedream.app ↔ web-conect-us-ledger-live-wallet.typedream.app 52 first reproduced 2026-08-29

support-ledgrcom-start-web.typedream.app web-conect-us-ledger-live-wallet.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
appeared together (24h)	temporal	6	-
same registrar	registration	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

support-ledgrcom-start-web.typedream.app ↔ windows-ledger-live.typedream.app 52 first reproduced 2026-08-29

support-ledgrcom-start-web.typedream.app windows-ledger-live.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
appeared together (24h)	temporal	6	-
same registrar	registration	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

web-conect-us-ledger-live-wallet.typedream.app ↔ windows-ledger-live.typedream.app 52 first reproduced 2026-08-29

web-conect-us-ledger-live-wallet.typedream.app windows-ledger-live.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
appeared together (24h)	temporal	6	-
same registrar	registration	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

home-ledgrreliveapp.typedream.app ↔ sso-ledger-live-strt-ledger-support-cdn.typedream.app 50 first reproduced 2026-08-30

home-ledgrreliveapp.typedream.app sso-ledger-live-strt-ledger-support-cdn.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
same registrar	registration	4	-
appeared together (72h)	temporal	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

home-ledgrreliveapp.typedream.app ↔ support-ledgrcom-start-web.typedream.app 50 first reproduced 2026-08-30

home-ledgrreliveapp.typedream.app support-ledgrcom-start-web.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
same registrar	registration	4	-
appeared together (72h)	temporal	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

sso-ledger-live-strt-ledger-support-cdn.typedream.app ↔ start-web-en-ledger-live-login.typedream.app 50 first reproduced 2026-08-29

sso-ledger-live-strt-ledger-support-cdn.typedream.app start-web-en-ledger-live-login.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
same registrar	registration	4	-
appeared together (72h)	temporal	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

sso-ledger-live-strt-ledger-support-cdn.typedream.app ↔ support-ledgrcom-start-web.typedream.app 50 first reproduced 2026-08-29

sso-ledger-live-strt-ledger-support-cdn.typedream.app support-ledgrcom-start-web.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
same registrar	registration	4	-
appeared together (72h)	temporal	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

sso-ledger-live-strt-ledger-support-cdn.typedream.app ↔ web-conect-us-ledger-live-wallet.typedream.app 50 first reproduced 2026-08-29

sso-ledger-live-strt-ledger-support-cdn.typedream.app web-conect-us-ledger-live-wallet.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
same registrar	registration	4	-
appeared together (72h)	temporal	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

sso-ledger-live-strt-ledger-support-cdn.typedream.app ↔ windows-ledger-live.typedream.app 50 first reproduced 2026-08-29

sso-ledger-live-strt-ledger-support-cdn.typedream.app windows-ledger-live.typedream.app

Signal	Category	Contributed	IDF
same TLS cert	tls	14.4	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
same registrar	registration	4	-
appeared together (72h)	temporal	4	-

Discounted observations

shared TLS SAN

tls

0.0

×0.80

cert_fingerprint_exact

ledger-live-download-sso-conect.typedream.app ↔ trezor-login-us-auth-start.typedream.app 46 first reproduced 2026-08-25

ledger-live-download-sso-conect.typedream.app trezor-login-us-auth-start.typedream.app

Signal	Category	Contributed	IDF
same screenshot	visual	12.8	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
same registrar	registration	4	-
appeared together (7d)	temporal	2	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

ledger-live-download-sso-conect.typedream.app ↔ web-conect-us-ledger-live-wallet.typedream.app 46 first reproduced 2026-08-29

ledger-live-download-sso-conect.typedream.app web-conect-us-ledger-live-wallet.typedream.app

Signal	Category	Contributed	IDF
same screenshot	visual	12.8	×0.80
same nameservers	infra	11.2	×0.80
similar name	naming	10.0	-
same apex	infra	8.0	×0.80
same registrar	registration	4	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

ledger-live-wallet-start-conect-us-en.typedream.app ↔ trezor-login-us-auth-start.typedream.app 46 first reproduced 2026-08-14

ledger-live-wallet-start-conect-us-en.typedream.app trezor-login-us-auth-start.typedream.app

Signal	Category	Contributed	IDF
same screenshot	visual	12.8	×0.80
same nameservers	infra	11.2	×0.80
same apex	infra	8.0	×0.80
similar name	naming	8.0	×0.80
same registrar	registration	4	-
appeared together (7d)	temporal	2	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

ledger-live-wallet-start-conect-us-en.typedream.app ↔ web-conect-us-ledger-live-wallet.typedream.app 46 first reproduced 2026-08-29

ledger-live-wallet-start-conect-us-en.typedream.app web-conect-us-ledger-live-wallet.typedream.app

Signal	Category	Contributed	IDF
same screenshot	visual	12.8	×0.80
same nameservers	infra	11.2	×0.80
similar name	naming	10.0	-
same apex	infra	8.0	×0.80
same registrar	registration	4	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

Infrastructure footprint

IP addresses

188.114.96.3 5/9

188.114.97.3 4/9

ASNs

13335 9/9

Hosting orgs

Cloudflare, Inc. 9/9

Registrars

Squarespace Domains II LLC. 9/9

TLS certs

WE1 6/9

Export JSON CSV TXT

corr-1.3.0 · built 2026-09-13 05:00 UTC - rebuilt daily

	1	2	3	4	5	6	7	8	9
1		64	60	44	44	52	52	50	44
2	64		58	46	46	52	52	50	44
3	60	58		39	39	50	52	50	39
4	44	46	39		52	31	31	31	46
5	44	46	39	52		31	31	31	46
6	52	52	50	31	31		52	50	31
7	52	52	52	31	31	52		50	31
8	50	50	50	31	31	50	50		31
9	44	44	39	46	46	31	31	31

	1	2	3	4	5	6	7	8	9
1		64	60	44	44	52	52	50	44
2	64		58	46	46	52	52	50	44
3	60	58		39	39	50	52	50	39
4	44	46	39		52	31	31	31	46
5	44	46	39	52		31	31	31	46
6	52	52	50	31	31		52	50	31
7	52	52	52	31	31	52		50	31
8	50	50	50	31	31	50	50		31
9	44	44	39	46	46	31	31	31

	1	2	3	4	5	6	7	8	9
1		64	60	44	44	52	52	50	44
2	64		58	46	46	52	52	50	44
3	60	58		39	39	50	52	50	39
4	44	46	39		52	31	31	31	46
5	44	46	39	52		31	31	31	46
6	52	52	50	31	31		52	50	31
7	52	52	52	31	31	52		50	31
8	50	50	50	31	31	50	50		31
9	44	44	39	46	46	31	31	31