newr-live-ledgr[.]pages[.]dev

PhishDestroy identifies newr-live-ledgr.pages.dev as an active crypto drainer posing as a Ledger login portal, currently under investigation for phishing activity. This domain employs deceptive tactics to trick users into connecting crypto wallets, enabling unauthorized fund transfers. This domain was flagged by PhishDestroy's threat intelligence pipeline and exhibits multiple red flags. It resolves to IP 172.66.44.89 and is registered through Cloudflare, Inc., providing anonymity to the threat actor. The SSL certificate is issued by Google Trust Services, which does not imply legitimacy for phishing domains. VirusTotal currently shows 3/95 detections, indicating it has evaded automated scanners, though this may change as threat intel updates. The domain uses Cloudflare Pages (pages.dev subdomain) to host the malicious content, a common tactic among phishers to quickly deploy and rotate infrastructure. No known blocklists or trust score databases currently flag this domain. To mitigate risk, users should never enter wallet credentials or connect wallets to suspicious sites. PhishDestroy recommends verifying domain authenticity through official channels (e.g., Ledger's website) and using hardware wallet confirmation for all transactions. Report this domain immediately to PhishDestroy and your wallet provider if exposed. Enable transaction approvals and use burner wallets for testing to limit potential losses.