desktop-ledgr[.]framer[.]ai
“Official Ledger Live Desktop Download | Ledger.com/Start”
desktop-ledgr.framer.ai — Konten tidak tersedia. Peniruan identitas merek: Ledger; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 5/93 (alphaMountain.ai, Certego, Ermes, Gridinsoft, SOCRadar); PhishDestroy score 65/100. Registrar: CSC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of desktop-ledgr.framer.ai, observed on July 25, 2026, shows a brand‑impersonation infrastructure that targets Ledger users. The site resolves to the Amazon Web Services address 35.71.142.77, which is assigned to AS16509 (Amazon.com, Inc.) and geolocated in the United States. TLS is provided by a Let’s Encrypt certificate (E8), indicating a valid but freely issued certificate. An HTTP request returns a 404 status, and the page title reported by crawlers is "Official Ledger Live Desktop Download | Ledger.com/Start," matching the Ledger brand and confirming the impersonation intent.
Technical fingerprints list Framer Sites, React, HSTS, and HTTP/3, suggesting the use of a modern front‑end stack hosted on the framer.ai subdomain. The domain is registered through CSC Corporate Domains, Inc., and its authoritative name servers are ns-1902.awsdns-45.co.uk, ns-635.awsdns-15.net, ns-1198.awsdns-21.org, among others. Reputation data shows the domain appears on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal analysis reports five detections out of ninety‑three scanning engines, reinforcing the malicious classification.
The observed characteristics—Ledger brand reference, crypto‑scam labeling, and the use of a legitimate‑looking download page—indicate a credential‑stealing or malware‑distribution campaign aimed at Ledger Live users. Defenders should add desktop-ledgr.framer.ai to URL filtering and DNS block lists, monitor traffic to the associated AWS IP, and treat any connections to the domain as hostile. Continuous re‑scanning of the domain and its IP range is recommended to capture any re‑activation, and incident response teams should alert end‑users to the fraudulent Ledger Live download page.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 4 identified
Framer is a no-code web design platform for designing and publishing responsive websites.
www.framer.com Keyakinan 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive