hub-live-ledgrx[.]framer[.]media

This domain, hub-live-ledgrx.framer.media, is flagged for brand impersonation, specifically targeting the Ledger brand. The domain impersonates an official Ledger login page, potentially misleading users into providing sensitive information such as login credentials and personal data. The page title 'Ledger Login | Secure Wallet Access @Official®' is designed to appear legitimate, increasing the risk of user deception.

Infrastructure analysis reveals that the domain is registered through CSC Corporate Domains, Inc. and has been flagged by 16 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. The domain currently resolves to the IP address 31.43.160.6 and uses an SSL certificate from Let's Encrypt. It is also listed on one security blocklist and is blocked by PhishDestroy. The domain's current status is offline, which may suggest that it has been taken down due to security concerns.

If users have visited this domain, they should immediately check their Ledger accounts for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication if not already active. Users should also monitor their financial statements for any unusual transactions and report any suspicious activity to Ledger's official support channels. Additionally, users should avoid clicking on links or providing personal information on any unverified websites and verify the URL of the official Ledger website before logging in.