live-desktop-info[.]pages[.]dev

PhishDestroy identifies live-desktop-info.pages.dev as a high-risk crypto drainer impersonating legitimate system tools, currently under investigation for active malicious activity. This domain resolves to IP 188.114.97.3 and has not yet been flagged by VirusTotal, showing 10/95 detections as of the latest scan. Registered through Cloudflare, Inc., the domain holds a Google Trust Services SSL certificate, which does not guarantee its legitimacy or safety.

This domain was flagged as a crypto drainer, a specific type of phishing attack designed to trick users into unknowingly transferring cryptocurrency to attacker-controlled wallets. The absence of detections on VirusTotal (10/95) suggests it is either newly deployed or employs evasion techniques to bypass security scans. The use of Cloudflare’s infrastructure and a Google-issued SSL certificate further obscures its malicious nature, as these services are commonly exploited by threat actors to lend false credibility to fraudulent sites. The domain’s association with system tool impersonation indicates a deliberate attempt to exploit user trust in legitimate software utilities.

To mitigate risks, users should avoid interacting with live-desktop-info.pages.dev entirely, as even visiting the site may expose them to malicious scripts or fraudulent prompts. If you have already visited the site, disconnect from the internet to prevent potential unauthorized transactions or data exfiltration. Report the domain to your antivirus provider and relevant cybersecurity platforms (e.g., VirusTotal, URLVoid) to aid in blocking efforts. For crypto users, verify wallet addresses through multiple independent sources and enable transaction confirmation alerts to detect suspicious transfers early.