us-appwallet[.]pages[.]dev

The domain us-appwallet.pages.dev has been identified as a brand impersonation threat, currently active and targeting the Ledger cryptocurrency wallet brand. This domain is designed to deceive users into believing they are accessing the official Ledger Live platform, as evidenced by its page title "Ledger® Wallet Live — Getting Started | official Ledger™ Live App." The threat is categorized as high risk due to its active status and the sensitive nature of the targeted brand, which manages cryptocurrency assets.

Technical analysis reveals that us-appwallet.pages.dev is flagged by 10 out of 95 VirusTotal security vendors, indicating a significant but not universal consensus on its malicious nature. The domain was created on March 23, 2026, and is registered through Cloudflare, Inc., a common registrar for both legitimate and malicious sites. It resolves to the IP address 188.114.97.3, which is associated with Cloudflare's infrastructure. The SSL certificate is issued by Google Trust Services, specifically WE1, which can lend a false sense of legitimacy. Additionally, the domain appears on one security blocklist, further confirming its malicious intent. These technical indicators collectively point to a sophisticated phishing operation aimed at stealing credentials or private keys from Ledger users.

Given its current active status, immediate caution is advised. Users should avoid interacting with the domain us-appwallet.pages.dev under any circumstances. To stay safe, always verify the official Ledger website URL (ledger.com) and never enter sensitive information on sites accessed through unsolicited links or emails. PhishDestroy recommends checking the full report for ongoing updates and reporting the domain to relevant security authorities. Proactive measures include using security tools that block known phishing domains and enabling two-factor authentication on all cryptocurrency accounts.