help-ledglive-eng-app[.]pages[.]dev

PhishDestroy identifies help-ledglive-eng-app.pages.dev as a domain posing as a fake Ledger Live support site, currently under investigation for generic phishing activity. This domain is actively distributing fraudulent content designed to deceive users into revealing sensitive information such as login credentials or financial details. The threat remains active and requires immediate user awareness to prevent potential account compromise or financial loss.

This domain resolves to IP address 172.66.47.92 and was flagged by 7 of 95 VirusTotal vendors at the time of analysis. It is registered through Cloudflare, Inc., utilizes a Google Trust Services SSL certificate, and operates under the Pages.dev platform. The lack of detections on VirusTotal, combined with its use of legitimate infrastructure providers, highlights the sophisticated nature of this phishing attempt, which may evade initial automated detection measures.

Currently, the domain remains active and continues to pose a risk to users seeking genuine Ledger Live support. Users are strongly advised to avoid interacting with this site, verify the authenticity of support channels through official Ledger Live documentation, and report any suspicious activity to Ledger’s official security channels. Additionally, enabling two-factor authentication on Ledger accounts can provide an added layer of security against credential theft attempts.