pick-lesgw[.]pages[.]dev

The domain pick-lesgw.pages.dev poses a critical threat as a brand impersonation site targeting Ledger cryptocurrency wallet users. The page presents itself as a legitimate Ledger support and setup portal, using the title 'Ledger.com Start — Troubleshooting, FAQ & Secure Setup Checklist' to trick visitors into entering sensitive information such as recovery phrases or login credentials. This is a classic crypto drainer tactic, where the stolen data is used to empty victims' cryptocurrency wallets. The site is currently active and continues to defraud users.

PhishDestroy's investigation reveals compelling evidence of this domain's malicious nature. VirusTotal flags it with 7 out of 95 security vendors marking it as malicious, indicating significant detection across the cybersecurity community. The domain was registered through Cloudflare, Inc. on April 05, 2026, and is hosted at IP address 188.114.96.3 with an SSL certificate issued by Google Trust Services (WE1). Despite being listed on at least one security blocklist, the site remains operational, underscoring the need for user vigilance.

If you have visited pick-lesgw.pages.dev and entered any personal or wallet information, immediately transfer any cryptocurrency assets to a new, secure wallet that has never been exposed. Change all associated passwords and enable two-factor authentication where possible. Run a full antivirus scan on your device and consider monitoring your accounts for unauthorized activity. Report the incident to Ledger's official support team and local cybercrime authorities. Always verify URLs directly with the official Ledger website before entering any sensitive data.