eng-ledger-deskttop[.]pages[.]dev

PhishDestroy identifies eng-ledger-deskttop.pages.dev as an active crypto drainer domain currently under investigation. This malicious site is designed to steal cryptocurrency assets by tricking users into connecting their wallets under false pretenses, specifically mimicking a digital ledger or desktop application interface. The threat remains active with no confirmed brand impersonation at this stage, though its operational tactics align with known crypto drainer campaigns targeting unsuspecting users through deceptive web interfaces. This domain was flagged by 7 of 95 VirusTotal vendors, indicating it has evaded detection by current antivirus signatures as of the latest scan. Registered through Cloudflare, Inc., the domain resolves to IP address 188.114.96.3 and operates under Google Trust Services' SSL certificate infrastructure. While the exact creation date is not specified in available records, the absence of detections suggests recent deployment or advanced evasion techniques. Trust scores remain unverified due to low community reporting, and no confirmed blocklist entries have been documented at this time. The domain's infrastructure leverages legitimate cloud services to obfuscate malicious intent, a common tactic among crypto drainers to bypass conventional security measures. Given its active status and cryptocurrency-focused threat vector, eng-ledger-deskttop.pages.dev poses a significant risk to users engaging with web-based financial applications. PhishDestroy recommends immediate avoidance of this domain and urges users to verify the legitimacy of any cryptocurrency-related websites through its database. Security teams should monitor network traffic for connections to IP 188.114.96.3 and inspect SSL certificates issued by Google Trust Services for similar patterns. Users who may have already interacted with this domain should revoke any wallet connections, transfer remaining assets to a secure wallet, and perform a full security audit of their cryptocurrency holdings. Continuous monitoring of this domain for emerging detection signatures is strongly advised as the investigation progresses.