main-desktop-ledgre[.]framer[.]ai

The domain main-desktop-ledgre.framer.ai is a phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It presents itself as a legitimate source for downloading Ledger Live Desktop software, aiming to deceive users into installing malicious files or divulging sensitive information. This site is classified as a cryptocurrency scam and is currently taken offline, posing no active threat at this time.

Technical analysis of main-desktop-ledgre.framer.ai reveals 0 of 95 VirusTotal vendors flagged the domain as malicious, and Google Safe Browsing has not issued any warnings. The domain appears on 1 security blocklist (PhishDestroy) and is registered through CSC Corporate Domains, Inc. It resolves to the IP address 35.71.142.77, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. The SSL certificate is issued by Let's Encrypt (E8), and the observed page title was 'Download Ledger Live Desktop for Secure Device Use'. Detected technologies include Framer Sites, React, HSTS, and HTTP/3. The domain currently returns an HTTP 404 status, confirming its offline status.

Users who interacted with main-desktop-ledgre.framer.ai should take immediate action to secure their assets. Revoke any token approvals granted to unknown contracts, transfer funds to a new wallet, and monitor accounts for unauthorized transactions. Change passwords for any accounts accessed via the phishing site and enable two-factor authentication (2FA) where available. Report the domain to Ledger's official support channels and submit it to platforms like PhishTank or Google Safe Browsing to aid in broader threat mitigation.