enus-appledger[.]pages[.]dev

The domain enus-appledger.pages.dev is currently flagged as an active phishing site specializing in brand impersonation of Ledger, a hardware cryptocurrency wallet provider. Analysis indicates the domain is designed to mimic the official Ledger Live Wallet interface, as evidenced by the page title 'Ledger Live Wallet | Secure Crypto,' which directly replicates the branding of the legitimate service. The domain remains operational and poses a significant risk to users attempting to access cryptocurrency management tools. Infrastructure analysis reveals the domain was registered on September 23, 2025, through Cloudflare, Inc. It resolves to the IP address 172.66.47.31, located in Canada and associated with Cloudflare's network infrastructure. Security vendor assessments show that 9 of 95 VirusTotal engines have flagged this domain as malicious, while it also appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), a common provider for both legitimate and malicious domains. The domain has been explicitly blocked by PhishDestroy, further confirming its malicious intent. As of the latest assessment, enus-appledger.pages.dev remains active and continues to host phishing content. Organizations and users are advised to block this domain at the network level and update endpoint protection rules to prevent access. Security teams should monitor for connections to 172.66.47.31 and review logs for any prior interactions with the domain. Users who may have visited this site should immediately revoke any active sessions, reset credentials, and verify their cryptocurrency wallet integrity for potential unauthorized transactions.