lovefrompippin[.]live

The domain lovefrompippin.live was a brand-impersonation phishing site targeting Google users. It presented itself as an official Google login page but was designed to harvest credentials through a credential-phishing scheme. No crypto drainer kit was observed. The site is currently taken offline, but it previously posed an elevated risk due to its deceptive branding and active phishing activity.

lovefrompippin.live was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and SOCRadar, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on December 24, 2025, and resolved to the IP address 172.217.18.4, hosted on Google LLC's infrastructure (AS15169). No SSL certificate was available, and the observed page title was 'Google'. Nameservers were irena.ns.cloudflare.com and major.ns.cloudflare.com. Gridinsoft assigned the domain a trust score of 0/100, further indicating its malicious nature.

Users who entered credentials on lovefrompippin.live should immediately change their Google passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions. Report the phishing domain to Google’s Safe Browsing team via their reporting tool and to the registrar, PDR Ltd., to aid in further takedown efforts. If financial or sensitive data was exposed, consider contacting relevant institutions to secure accounts.