app-help-live[.]pages[.]dev

The domain app-help-live.pages.dev was registered on April 24, 2026 and is hosted on Cloudflare Pages. It serves a page titled “Ledger Live: Complete Guide to Your Secure Crypto Wallet”, explicitly referencing the Ledger brand, and is classified as a brand‑impersonation campaign. The site presents a valid SSL certificate issued by Google Trust Services (WE1) and resolves to the IP address 172.66.44.84, which is owned by Cloudflare, Inc. and located in Canada. HTTP requests return a 200 status code, indicating the page is reachable. Infrastructure analysis shows a zero trust score from Gridinsoft (0/100) and the domain appears on one external security blocklist. VirusTotal scans report that 2 of 94 security vendors have flagged the domain, reinforcing the suspicion. PhishDestroy has already added the domain to its blocklist, confirming active mitigation by at least one anti‑phishing service. Current intelligence does not disclose the exact content of the page beyond the title, so the presence of credential‑stealing forms or malicious scripts cannot be confirmed. However, the combination of brand targeting, recent creation, low trust rating, and multiple vendor detections strongly suggests a high‑risk impersonation attempt aimed at Ledger users. Defenders should block DNS resolution for app-help-live.pages.dev, monitor outbound connections to 172.66.44.84, and add the domain to URL filtering and email security policies. Incident response teams should treat any communications referencing Ledger Live that originate from this domain as malicious and advise users to verify official Ledger URLs. Ongoing observation is advised to detect any changes in the payload or additional infrastructure.