support-ledgor-eng-w[.]pages[.]dev

This domain, support-ledgor-eng-w.pages.dev, has been identified as a brand impersonation threat targeting Ledger, a cryptocurrency hardware wallet provider. The site, titled 'Official Site | Ledger Start Guide,' mimics legitimate Ledger support resources to deceive users into engaging with fraudulent content. As of the latest assessment, the domain is offline, though prior activity suggests it was operational for malicious purposes. Infrastructure analysis reveals the domain was created on April 18, 2026, and resolves to the IP address 172.66.44.178. It is registered through Cloudflare, Inc., and utilizes an SSL certificate issued by Google Trust Services. Despite its deceptive nature, the domain has not been flagged by any of the 95 vendors on VirusTotal, though it appears on one security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, indicating a high-risk classification based on known indicators. The current status of support-ledgor-eng-w.pages.dev is offline, though its prior existence and infrastructure warrant continued monitoring. Organizations and users are advised to block this domain at the network level and include it in threat intelligence feeds. Security teams should review logs for any prior interactions with the domain or its associated IP address. Users who may have visited the site should verify their systems for unauthorized access or installed software, particularly if they engaged with any prompts or downloads. Given the domain's impersonation of a cryptocurrency service, heightened scrutiny is recommended for any related financial or credential-based activity.