eon-ledjer-com-strt[.]pages[.]dev

The domain eon-ledjer-com-strt.pages.dev was registered on March 22, 2026 and is currently flagged as offline. Analysis shows the site is hosted behind Cloudflare infrastructure, resolving to the IP address 172.66.46.250, which is geolocated to Canada and associated with Cloudflare, Inc. The domain is serviced by the Cloudflare nameservers langston.ns.cloudflare.com and wren.ns.cloudflare.com and presents an SSL certificate issued by Google Trust Services under the WE1 label, indicating a valid TLS chain. HTTP responses return a 403 status code, and the server advertises HSTS and HTTP/3 support. VirusTotal scans have recorded 11 detections out of 94 security vendors, and the domain appears on a single external blocklist.

The Gridinsoft trust score is 0 out of 100, reinforcing its malicious classification. The page title captured from the site, "Get started with Ledger — Quick Start Presentation," suggests a crypto‑related lure targeting Ledger users. The threat is categorized as a Crypto Scam and is listed as impersonating the Ledger brand. The domain has been blocked by the PhishDestroy service.

While the exact page content has not been publicly disclosed, the combination of brand impersonation, low trust score, multiple vendor detections, and the presence on a blocklist indicates a high likelihood of credential harvesting or monetary fraud. Defenders should add eon-ledjer-com-strt.pages.dev to URL filtering rules, enforce blocking of its resolving IP 172.66.46.250, and monitor related Cloudflare hostnames for similar patterns. Continuous re‑evaluation is advised in case the site reappears or additional indicators emerge.