ledger--wallet--welcome[.]pages[.]dev

This domain, ledger--wallet--welcome.pages.dev, is a high-risk brand impersonation site targeting Ledger, a reputable manufacturer of cryptocurrency hardware wallets. The site poses a significant threat as it attempts to deceive users into believing they are interacting with an official Ledger service, potentially leading to the theft of sensitive information such as login credentials, personal data, and financial details.

Analysis indicates that the domain was created on March 28, 2026, and is registered through Cloudflare Pages. It resolves to the IP address 172.66.44.110, which is located in California and is associated with Cloudflare, Inc. The domain is currently flagged by 9 out of 95 security vendors on VirusTotal, and it appears on one security blocklist. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting visitors.

If a user has visited this site, they should immediately cease any interaction and avoid entering any personal or financial information. It is recommended to run a full system scan using updated antivirus software to detect any potential malware. Users should also monitor their financial accounts and credit reports for any unauthorized activity. If any sensitive information was entered, users should contact their financial institutions and change passwords for all related accounts.