desktop-en-access[.]pages[.]dev
“Ledger Live Desktop | Secure Crypto Wallet”
已存储的观测记录
观测到的标题差异
证据摘要
PhishDestroy identifies desktop-en-access.pages.dev as an active crypto-drainer phishing page deployed on Cloudflare Pages. The domain was registered minutes ago and currently resolves to 188.114.97.3, hosted behind Google Trust Services SSL. 6 of 95 security engines on VirusTotal flagged the site as malicious at the time of analysis, indicating it remains undetected by most scanners while actively targeting crypto users.
This threat works by luring victims to a convincing replica of a legitimate desktop-access portal where a malicious JavaScript wallet drainer silently approves unlimited token transfers once a crypto wallet is connected. The domain uses Cloudflare’s free Pages service to spin up new subdomains rapidly, complicating takedowns and bypassing some IP-based blocklists. The presence of a Google Trust Services certificate adds a cosmetic veneer of legitimacy, increasing the chance that non-technical users will enter credentials or connect wallets.
If you visited desktop-en-access.pages.dev, immediately revoke any wallet connections through your wallet’s connected-app or settings page. Do not approve any pending transactions. Clear browser cache and cookies, run a malware scan, and consider rotating wallet addresses. Report the domain to Google Safe Browsing (safebrowsing.google.com/report_phish) and your antivirus vendor using the seed 5e567f for cross-correlation. Disable browser extensions and use a separate, hardware-isolated wallet for future tests to prevent second-stage attacks.
Data Coverage
网络安全情报
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月11日
取证情报
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of desktop-en-access.pages.dev · checked Mar 25, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控