kulkarni-kanchan[.]github[.]io

The domain kulkarni-kanchan.github.io has been confirmed as an active crypto drainer scam site. This malicious domain is currently hosting a deceptive login portal designed to steal cryptocurrency wallet credentials and drain digital assets from unsuspecting victims. The threat is classified as high-risk due to its active status and the specific intent to defraud users through fraudulent authentication prompts.

PhishDestroy identifies that this domain is flagged by 13 of 95 VirusTotal security vendors, indicating a significant detection rate among leading cybersecurity solutions. The domain was registered through GitHub, Inc., resolves to IP address 185.199.108.153, and has been noted on 1 security blocklist. Additionally, the site utilizes a Let's Encrypt SSL certificate to appear legitimate, while Google Safe Browsing has classified it under SOCIAL_ENGINEERING threats. This combination of indicators underscores the domain's malicious intent and the need for immediate caution.

Due to the active status of kulkarni-kanchan.github.io and its confirmed association with crypto drainer operations, users are strongly advised to avoid interacting with this domain entirely. The presence of a Let's Encrypt certificate and hosting on GitHub Pages further complicates detection, making manual verification critical. PhishDestroy recommends that users verify the legitimacy of any cryptocurrency-related domains through its platform before entering credentials or transferring assets. Organizations should consider blocking this domain and its associated IP at the network level to prevent accidental exposure. Additionally, users who may have already entered wallet credentials should immediately revoke access to compromised wallets and transfer remaining funds to secure addresses.