lkgry[.]com

lkgry.com is a confirmed crypto drainer phishing domain currently active in the wild. This website employs deceptive tactics designed to exfiltrate cryptocurrency assets from unsuspecting users by tricking them into connecting compromised wallets or entering private keys directly into fraudulent interfaces. The site is categorized under the generic phishing threat class, with a current operational status marked as active, indicating ongoing malicious activity targeting cryptocurrency holders. This is not a speculative assessment; the threat has been validated through multiple security layers and live user reports.

PhishDestroy’s investigation reveals that lkgry.com exhibits several red flags: it was registered on March 24, 2026, through OwnRegistrar, Inc., a registrar known for hosting high-risk domains. The site resolves to IP address 64.236.164.8 and utilizes a legitimate SSL certificate issued by Let's Encrypt, a tactic commonly used to convey false legitimacy. Security intelligence from VirusTotal reports that 9 out of 95 antivirus engines flag this domain as malicious, placing it in the elevated risk category. Its recent creation date and high blocklist presence suggest a rapidly deployed threat designed to evade long-term detection mechanisms.

Given the elevated risk level and the specific threat posed by this crypto drainer, users are strongly advised to avoid interacting with lkgry.com under any circumstances. Recommendations include verifying the site’s status using PhishDestroy’s real-time scanner before visiting, ensuring wallet software is updated with the latest security patches, and using hardware wallets or air-gapped devices for transactions involving sensitive assets. Additionally, block the IP address 64.236.164.8 and domain lkgry.com in firewall rules or hosts file entries to prevent accidental exposure. If you suspect exposure to this threat, revoke any wallet connections immediately and transfer remaining assets to a clean, isolated wallet. Users should also report any encounters with this domain to browser security teams and cryptocurrency security communities to aid in global threat mitigation efforts.