ledger-login-web-conect-web-sso-in.typedream.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of ledger-login-web-conect-web-sso-in.typedream.app
This domain appears to host a webpage presented as a Ledger-related login or support page, based on the domain string and the page title "Ledger® Live: Login | Getting started | | Ledger® Support." Ledger is widely known for cryptocurrency hardware wallets and account-management software, so the apparent purpose of this page may be to attract users looking for wallet access, onboarding help, or account support.
The site is hosted as a subdomain on typedream.app, which is a website-building platform rather than Ledger's primary corporate domain. The naming pattern "ledger-login-web-conect-web-sso-in" and the generic metadata "A website made with Typedream" suggest this may be a custom landing page created through a third-party publishing service rather than an official brand-owned support property.
Based on the available content and naming, the page appears to target cryptocurrency users and may be attempting to resemble an official Ledger login or support experience. The operator is not clearly identified in the provided scan data, and the use of a platform subdomain instead of the brand's main domain may warrant additional scrutiny.
Safety Assessment for ledger-login-web-conect-web-sso-in.typedream.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 12 out of 91 security engines, with most detections describing phishing or malicious behavior. In addition, the page title references Ledger branding, while the domain closely resembles ledger.com and may be a look-alike intended to capture users seeking the legitimate Ledger website. That resemblance is a significant concern because cryptocurrency-related impersonation pages are commonly used to harvest wallet credentials, seed phrases, or other sensitive information.
Blacklist and reputation data were mixed rather than fully clean. Major content-focused threat databases in the provided scan did not report listings at the time of the check, but the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal and does not by itself prove harmful website content. A malware scan also reported a generic potentially suspicious finding on the page, which on its own would be low confidence, but here it appears alongside broader phishing detections and the brand-resembling domain pattern.
The domain is several years old, which can sometimes reduce risk, but age alone does not outweigh the combination of multi-engine phishing detections, the imitation of a well-known cryptocurrency brand, the lack of ranking, and the use of a third-party site-builder subdomain for a supposed login/support page. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, with expiry listed as 2026-10-24. It is served through Cloudflare infrastructure on IP address 188.114.96.2, with Cloudflare nameservers and hosting geolocated to Toronto, Canada in the scan data. DNSSEC appears to be unsigned.
From a technical standpoint, the presence of HTTPS only indicates encrypted transport and should not be treated as proof of legitimacy. The page appears to be deployed on a Typedream subdomain while presenting Ledger-themed branding, which may be inconsistent with what users would typically expect from an official cryptocurrency account portal. No iframe activity was reported, and external references were limited, but the overall infrastructure profile is consistent with a lightweight hosted landing page rather than a clearly attributable official service.
Share your experience with this website. Was it safe? Did you encounter any issues?