ledgerr-starrt[.]pages[.]dev

The domain ledgerr-starrt.pages.dev is currently classified as an active crypto‑drainer threat with an elevated risk rating. Infrastructure analysis shows the domain is registered through Cloudflare, Inc., and uses Cloudflare’s authoritative nameservers nicole.ns.cloudflare.com and randy.ns.cloudflare.com. DNS resolution points to the IP address 172.66.47.115, which is a Cloudflare‑owned address commonly associated with fastly‑served content.

The domain appears on one public security blocklist and is explicitly blocked by the PhishDestroy service, indicating that at least one trusted threat‑intel feed has identified it as malicious. VirusTotal data reports that three out of ninety‑one scanning engines have flagged the domain, providing independent confirmation of suspicious behavior. No additional public signals such as Safe Browsing alerts, Open Threat Exchange tags, SSL certificate details, HTTP status codes, or page‑title metadata are available in the current intelligence set, leaving the exact hosting configuration and response characteristics unverified.

Defenders should prioritize immediate blocking of the domain at the DNS and proxy layers, add the associated IP address to network‑level deny lists, and monitor outbound traffic for attempts to contact the host. Continuous re‑evaluation is advised as further telemetry—such as HTTP response analysis or additional vendor detections—becomes available, to refine detection rules and confirm whether the observed indicators evolve.