home-lpger-io[.]pages[.]dev

PhishDestroy identifies the domain home-lpger-io.pages.dev as an active crypto drainer kit distributing under the generic phishing threat type. This subdomain mimics a legitimate service’s login interface and is designed to siphon cryptocurrency from unwitting users upon credential entry. No specific brand impersonation is named in available telemetry, but the drainer leverages a fake login form to harvest private keys or wallet access. This domain resolves to IP address 188.114.96.3 and uses a Google Trust Services SSL certificate for authenticity signaling. The domain was registered through Cloudflare, Inc. and remains unflagged on VirusTotal with 1/95 detections as of this report. It remains under investigation for phishing deployment and has not yet been added to Google Safe Browsing (GSB) or major blocklists, indicating a newly active threat. The current status is active with no official takedown or blocklist inclusion recorded. Users are advised to avoid interacting with this domain and to verify any similar URLs using PhishDestroy before entering sensitive data. The remaining risk is high due to unmitigated actor control and the drainer’s operational status. Response actions include continued monitoring and community reporting to accelerate blocklisting.