hub-ledgr-strt-com[.]framer[.]media

This domain, hub-ledgr-strt-com.framer.media, poses a brand impersonation threat designed to deceive users of Ledger, a hardware cryptocurrency wallet provider. The site mimics Ledger’s official setup page, titled 'Ledger.com/Start | Getting started — Ledger®™,' to trick victims into entering sensitive information or downloading malicious software. Given the high-risk nature of crypto-related scams, this impersonation could lead to unauthorized access to wallets, theft of private keys, or installation of crypto-draining malware. Users who interact with this site risk losing control of their digital assets permanently. Analysis indicates the domain is flagged by 19 out of 95 security vendors on VirusTotal, a clear indicator of malicious intent. The site was registered through CSC Corporate Domains, Inc., a registrar often associated with both legitimate and fraudulent domains. Infrastructure analysis reveals the domain resolved to IP address 31.43.161.6, hosted on Amazon Web Services (AS16509) in the Netherlands. The combination of brand impersonation, low detection but high-risk targeting, and use of a reputable hosting provider suggests an attempt to evade initial scrutiny while maintaining operational flexibility. The domain has since been taken offline, but similar threats may reappear under different names. If you visited hub-ledgr-strt-com.framer.media, immediately disconnect the device used from the internet to prevent further data exfiltration. Do not enter any recovery phrases, private keys, or passwords. If you connected a Ledger device or entered sensitive information, assume it is compromised and transfer all assets to a new, secure wallet using a different device. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where possible. Report the incident to Ledger’s official security team and consider filing a report with local cybercrime authorities. Users should verify all future Ledger-related links by accessing the official site directly via ledger.com and never trust third-party links, even if they appear legitimate.