wel-ledger-com[.]pages[.]dev

PhishDestroy identifies wel-ledger-com.pages.dev as an active brand-impersonation domain targeting Ledger cryptocurrency wallet users. This site mimics Ledger’s official branding to trick visitors into entering recovery phrases or private keys, risking direct theft of cryptocurrency assets. This domain was flagged by PhishDestroy on May 2024 with an elevated risk rating. VirusTotal shows exactly 1 out of 95 security vendors detected the threat. The domain is registered through Cloudflare, Inc. and resolves to IP address 188.114.96.3, which hosts the impersonation page under Google Trust Services SSL certificates. If you visited wel-ledger-com.pages.dev, stop interacting immediately. Do not enter any seed phrases, passwords, or private keys. Disconnect from the internet if you used the same credentials elsewhere. Scan your device with up-to-date antivirus software and consider revoking any exposed wallet keys through Ledger’s official recovery tools. Report the domain to Ledger’s fraud team and block it in your browser or firewall.