ledger-uss-live[.]pages[.]dev

This domain is flagged as a high-risk brand impersonation threat targeting the Ledger cryptocurrency wallet brand. The domain ledger-uss-live.pages.dev was created on April 17, 2026, registered through Cloudflare, Inc., and currently resolves to IP address 188.114.97.3, which is located in Canada and assigned to Cloudflare. The page title is 'Ledger Live — Protect Crypto Portfolio & Wallet App', directly mimicking the legitimate Ledger Live application. The SSL certificate is issued by Google Trust Services. The domain uses HSTS, HTTP/3, and Cloudflare technologies. Analysis from VirusTotal shows 11 of 94 security vendors flagging this domain as malicious. The domain is listed on one security blocklist and has been blocked by PhishDestroy. Gridinsoft trust score is 0/100. Nameservers are ken.ns.cloudflare.com and margot.ns.cloudflare.com. The domain remains active and responds with HTTP status 200. Defenders should block this domain at the network level, add it to email security filters, and monitor for any associated subdomains or similar naming patterns. Users should be warned not to visit this domain or provide any credentials, seed phrases, or personal information. Since the exact page content has not been visually analyzed, the presence of a login form or credential harvesting mechanism is inferred from the brand impersonation classification and page title.