web-wallet-ens[.]pages[.]dev

The domain web-wallet-ens.pages.dev is a confirmed brand impersonation site specifically targeting users of the Ledger hardware wallet. This domain is currently active and poses a high risk to anyone who may be tricked into entering sensitive information. The site masquerades as a legitimate Ledger Wallet portal, with a page title reading 'Ledger Wallet® | Starting In Your Account* Developer Portal', designed to steal login credentials and potentially drain cryptocurrency funds.

Technical indicators paint a clear picture of malicious intent. The domain is registered through Cloudflare Pages and was created on April 10, 2026, which is a very recent date—typical of phishing setups. It resolves to IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services (WE1). Security scanning platforms have flagged it heavily: VirusTotal reports 7 out of 95 security vendors marking this domain as malicious, and it already appears on one security blocklist. These factors collectively confirm the domain's dangerous nature.

As of this advisory, web-wallet-ens.pages.dev remains active and accessible. Users who encounter this domain should under no circumstances enter any personal, financial, or wallet-related information. PhishDestroy strongly recommends verifying any communication claiming to be from Ledger by navigating directly to the official Ledger website via a known bookmark or trusted search. If you have already interacted with this site, immediately transfer your crypto assets to a new wallet and contact Ledger support for further assistance. Always double-check URLs for subtle misspellings or unusual domain structures before proceeding.