en-us-live-pages[.]pages[.]dev

This domain, en-us-live-pages.pages.dev, poses a specific threat of brand impersonation, targeting the cryptocurrency wallet provider Ledger. The domain mimics legitimate Ledger pages, potentially leading users to believe they are interacting with official Ledger services. This can result in the theft of sensitive information, such as login credentials, and may be part of a broader campaign to defraud users.

Analysis indicates that en-us-live-pages.pages.dev has been registered through Cloudflare, Inc. and was created on April 13, 2026. The domain resolves to the IP address 188.114.97.3. As of the latest scan, VirusTotal reports 0/95 detections, indicating that the domain has not yet been flagged by most security engines. However, the domain appears on 1 security blocklist, specifically PhishDestroy, and has a Gridinsoft trust score of 0/100, which is the lowest possible score. The SSL certificate is issued by Google Trust Services, which can lend a false sense of security to unsuspecting users.

If users have visited en-us-live-pages.pages.dev, they should immediately check their Ledger accounts for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) if not already active. Users should also monitor their financial statements for any unusual transactions and report any suspicious activity to Ledger support. Additionally, users are advised to avoid clicking on links or downloading files from unverified sources and to only access official Ledger services through trusted domain names and verified app stores.