live--desktop--en[.]pages[.]dev

This domain, live--desktop--en.pages.dev, is flagged as a brand impersonation threat designed to deceive users of WalletConnect, a widely used protocol for connecting cryptocurrency wallets to decentralized applications. The site mimics legitimate WalletConnect interfaces, likely aiming to trick victims into revealing sensitive credentials, approving malicious transactions, or directly transferring cryptocurrency to attacker-controlled addresses. Such attacks often employ social engineering tactics, including fake login prompts, urgent security alerts, or fraudulent wallet connection requests, to exploit user trust and bypass security measures. Analysis indicates this domain was created on April 03, 2026, and registered through Cloudflare, Inc. Despite its recent creation date, the site has already been identified on one security blocklist, though it remains undetected by antivirus engines, with a VirusTotal score of 0 out of 95. The domain resolves to the IP address 188.114.97.3 and uses an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting visitors. The page title, Suspected phishing site | Cloudflare, suggests Cloudflare’s automated systems have already flagged the content as malicious, though the domain was not immediately taken down. If you visited live--desktop--en.pages.dev or interacted with any content resembling WalletConnect, immediate action is required to mitigate potential risks. Disconnect any wallets or accounts linked to the site and revoke any suspicious permissions granted to decentralized applications. Scan your device for malware using up-to-date security tools, as some crypto drainers or credential stealers may persist even after the site is offline. Monitor your cryptocurrency wallets for unauthorized transactions and consider transferring assets to a new wallet if you suspect compromise. Report the domain to relevant security teams and blocklists to prevent further abuse, and remain vigilant for similar threats targeting cryptocurrency users.