closeup-ldzr-liive-en[.]pages[.]dev

This domain, closeup-ldzr-liive-en.pages.dev, poses a high-risk threat by impersonating the official Ledger Live cryptocurrency wallet interface. Analysis indicates the site is designed to deceive users into entering sensitive wallet credentials or recovery phrases, which could result in unauthorized access and theft of digital assets. The page title explicitly mimics Ledger’s branding, displaying 'Ledger Livecom/start – Cryptocurrency' to create a false sense of legitimacy and urgency. Infrastructure analysis reveals the domain is hosted on Cloudflare’s content delivery network, resolving to the IP address 172.66.47.120. The SSL certificate is issued by Google Trust Services, a common tactic to appear secure while masking malicious intent. Detection metrics from VirusTotal show 17 out of 95 security vendors have flagged this domain as malicious, confirming its involvement in brand impersonation. The domain remains active, increasing the likelihood of exposure to unsuspecting users. Users who have visited closeup-ldzr-liive-en.pages.dev should immediately cease all interaction with the site. If any credentials, recovery phrases, or private keys were entered, affected wallets should be considered compromised. Users are advised to transfer remaining assets to a new, secure wallet and monitor all linked accounts for unauthorized transactions. Enabling multi-factor authentication on all cryptocurrency-related accounts and reviewing recent transaction histories can help mitigate further risks. Reporting the domain to relevant security teams and cryptocurrency platforms may aid in broader takedown efforts.