# eon-ledjer-com-strt.pages.dev — SUSPICIOUS

> PhishDestroy identifies eon-ledjer-com-strt.pages.dev as a crypto drainer phishing site flagged by 2/95 VirusTotal vendors. Impersonates Ledger wallets.

## Summary
PhishDestroy identifies eon-ledjer-com-strt.pages.dev as a malicious domain engineered to mimic Ledger wallet login interfaces, enabling cryptocurrency fund drain attacks. This site was flagged by only 2 out of 95 VirusTotal security vendors, indicating low detection coverage despite active abuse. The domain was registered through Cloudflare, Inc., resolves to IP 172.66.46.250, and utilizes a Google Trust Services SSL certificate to appear legitimate. Its low blocklist presence suggests agility in evading traditional defenses, making it a significant risk for cryptocurrency users.  This phishing domain specifically targets users of Ledger hardware wallets by deploying a fake login portal designed to harvest seed phrases and private keys. Upon credential submission, the site likely triggers automated fund transfers to attacker-controlled wallets using crypto drainer scripts integrated into the backend. The infrastructure leverages Cloudflare’s proxy services (172.66.46.250) to mask hosting origin and employs a valid SSL certificate to evade browser warnings, increasing the likelihood of successful deception. Threat actors commonly distribute such domains via phishing emails, fake ads, and imposter support sites, capitalizing on the irreversible nature of crypto transactions.  If you visited eon-ledjer-com-strt.pages.dev, immediately disconnect from the internet and revoke any entered seed phrases or private keys. Scan your device with updated antivirus software and consider transferring remaining funds to a newly initialized wallet using a clean, offline device. Do not reuse passwords or recovery phrases across services, and report the domain to Ledger support and your local cybercrime unit. Monitor blockchain transactions for unauthorized transfers and consider enabling transaction alerts on your wallet.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.46.250

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/08ac8337-1544-4efd-9e10-64a0ab3c11ad
- PhishDestroy: https://phishdestroy.io/domain/eon-ledjer-com-strt.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/eon-ledjer-com-strt.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eon-ledjer-com-strt.pages.dev/
Last updated: 2026-03-22