Phishing detection: support-ledgrcom-start-web.typedream.app

Ledger
https://support-ledgrcom-start-web.typedream.app Access site
Screenshot
Screenshot of support-ledgrcom-start-web.typedream.app
Investigate
Domain support-ledgrcom-start-web.typedream.app0 CT hosts on apex
URL https://support-ledgrcom-start-web.typedream.app
Phishunt analysis Beta
38 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +3.4 Cert reuse
  • +3.4 Shared IP cluster
  • +3.0 OpenPhish
  • +2.2 Country mismatch
  • +1.4 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +1.0 Young domain
  • +0.6 Long domain
  • +0.6 Registrar reputation
  • +0.6 Suspicious TLD
  • +0.3 Free CA
  • +0.3 Hyphens
  • +0.1 Deep subdomain
21 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Ledger hardware wallet support using a free typedream.app hosting subdomain. Confirmed malicious by OpenPhish. Targets cryptocurrency users, likely to steal recovery seed phrases or wallet access credentials. CSP and HSTS security headers are absent.

OpenPhishKeyword matchLong domain
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-28 · confidence 90%
Domain & Network
Whois
Network
IP 188.114.96.3 Cloudflare CDN
Country United StatesUnited States
ASN AS13335
TLS Cert WE1
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Cloudflare, Inc.

Tracked from 2026-08-28 13:16 UTC  ·  Last refreshed 2026-10-10 23:30 UTC