impot-lrdger[.]pages[.]dev

PhishDestroy identifies impot-lrdger.pages.dev as an active crypto drainer phishing domain facilitated through Cloudflare Pages. This domain impersonates a financial or cryptocurrency service to trick users into connecting wallets and draining funds, a common tactic associated with drainer kits such as VenomDrainer or similar malware-as-a-service offerings. The infrastructure leverages Cloudflare’s CDN and Pages service, enabling fast global propagation and evasion of traditional network-based defenses.

Technical indicators confirm elevated risk: the domain resolves to IP 188.114.96.3 and operates under a Google Trust Services SSL certificate, providing a false sense of legitimacy. VirusTotal currently shows 0 detections out of 95 engines, indicating zero automated detection at time of report. Registered via Cloudflare, Inc., the domain lacks sufficient historical reputation to trigger Google Safe Browsing (GSB) blocks and remains unlisted in major threat intelligence feeds as of this analysis.

This domain is currently active and under investigation, with no confirmed takedown or blocklist inclusion. Users are advised to avoid visiting or interacting with the site. PhishDestroy continues to monitor this domain via seed f0e8e8 and will update classifications as new intelligence emerges. Remaining risk remains critical due to low detection coverage and persistence through Cloudflare infrastructure.