en-us-lives-io[.]pages[.]dev

en-us-lives-io.pages.dev is flagged as an active brand-impersonation infrastructure targeting Ledger. The site presents the page title "Ledger Live - Secure Crypto Management," indicating an attempt to mimic the official Ledger Live service. The domain was registered on 19 April 2026 through Cloudflare, Inc., and resolves to the Cloudflare edge address 172.66.44.187 located in Canada. DNS resolution is served by the authoritative Cloudflare nameservers kristin.ns.cloudflare.com and simon.ns.cloudflare.com. HTTPS is provided by a Google Trust Services / WE1 certificate and the server advertises HSTS and HTTP/3, confirming the use of modern web security features. The site returns HTTP 200 and is currently listed on a single security blocklist; it is also blocked by PhishDestroy. A Gridinsoft trust score of 0 / 100 further reflects a lack of reputation. No additional intelligence such as malware samples or payload analysis is available, and the page content beyond the title has not been examined. Defenders should treat the domain as malicious, block DNS resolution and HTTP/S traffic to the host, and monitor for any related phishing emails referencing Ledger. Ongoing investigation is required to determine whether the site collects credentials or distributes malicious payloads.