official-ledgrlives[.]framer[.]ai

The domain official-ledgrlives.framer.ai is a phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It presents a fraudulent login page titled 'Ledger® Live: Login | Secure Access to Your Wallet' to deceive users into entering credentials or sensitive information, posing an elevated risk of cryptocurrency theft. No drainer kit was detected, but the site is classified as a cryptocurrency scam. As of the latest verification, official-ledgrlives.framer.ai has been taken offline.

Technical indicators confirm the malicious nature of official-ledgrlives.framer.ai. The domain is flagged by 3 of 95 security vendors on VirusTotal, including G-Data, Sophos, and Trustwave, and appears on 1 security blocklist (PhishDestroy). It was registered through CSC Corporate Domains, Inc. on January 06, 2018, and resolves to the IP address 35.71.142.77, hosted on Amazon.com, Inc.'s infrastructure in the US. The SSL certificate is issued by Let's Encrypt (E8), and the site employs technologies such as Framer Sites, React, HSTS, and HTTP/3. Despite these security features, the domain was not flagged by Google Safe Browsing.

Users who interacted with official-ledgrlives.framer.ai should immediately change their Ledger Live credentials and enable two-factor authentication (2FA) on all associated accounts. If cryptocurrency transactions were initiated, revoke any token approvals and transfer funds to a new, secure wallet. Report the phishing domain to Ledger's official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to prevent further abuse.