comprpcv2[.]pages[.]dev

comprpcv2.pages.dev is an active cryptocurrency drainer phishing domain currently under investigation for fraudulent activities. The domain masquerades as a legitimate service, likely impersonating a well-known brand to deceive users into connecting their wallets or entering sensitive credentials. Security researchers have flagged this domain as a high-risk threat due to its active deployment in phishing campaigns targeting cryptocurrency users. The platform hosting this domain, Cloudflare Pages, has not yet taken down the page, allowing the threat to persist. This domain was flagged by 2 of 95 VirusTotal vendors, indicating it has evaded detection by mainstream security tools. Registered through Cloudflare, Inc., the domain resolves to IP 172.66.47.180 and utilizes a Google Trust Services SSL certificate, which may lend false credibility to unsuspecting users. The infrastructure behind this domain suggests an attempt to exploit legitimate cloud services to host malicious content while leveraging trusted certificate authorities to appear legitimate. Despite its current low detection rate, the combination of active hosting and suspicious behavior warrants immediate caution. Users are strongly advised to avoid interacting with comprpcv2.pages.dev until further analysis is completed. PhishDestroy recommends verifying the safety of this domain using their comprehensive threat intelligence database. If you have recently visited this domain, disconnect your wallet immediately, revoke any unauthorized connections, and scan your devices for malware. Stay vigilant and report any suspicious activity to PhishDestroy to help protect the broader community from emerging threats. Always cross-check URLs and use trusted security tools before entering sensitive information.