livedesk[.]framer[.]ai

This report analyzes the domain livedesk.framer.ai, which presents itself as the official website for Ledger Live Desktop, a desktop application for managing cryptocurrency assets. The site poses a significant threat by impersonating the legitimate Ledger brand to target cryptocurrency users. The likely objective is to steal cryptocurrency wallet credentials, private keys, or seed phrases from victims who believe they are accessing a genuine Ledger product, leading to financial theft.

Technical analysis reveals that the domain was flagged by 8 out of 95 VirusTotal vendors. It is listed on 1 blocklist and specifically flagged by alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet, and Gridinsoft. The site is hosted on IP address 52.223.52.2, located in the United States and assigned to AS16509 Amazon.com, Inc. The domain was registered on 2018-01-06 through registrar CSC Corporate Domains, Inc. It uses a Let's Encrypt SSL certificate (E8) and has nameservers ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns.

As of the time of analysis, the domain livedesk.framer.ai is reported as DOWN/OFFLINE, indicating the site is not currently accessible. Despite this, the risk level remains high due to the impersonation of a trusted financial brand. The domain could be reactivated or redirected to other malicious infrastructure at any time. Users should avoid any interaction with this domain and rely only on official Ledger sources for software downloads.