# adarshbhoutekar.github.io — MALICIOUS

> Investigating adarshbhoutekar.github.io for crypto drainer activity. VirusTotal flags 13/95 vendors. Avoid interacting with this domain.

## Summary
PhishDestroy identifies adarshbhoutekar.github.io as an active crypto drainer impersonating legitimate services to siphon cryptocurrency assets. This GitHub-hosted page leverages deceptive web design and malicious JavaScript payloads to trick users into connecting their wallets, triggering unauthorized token transfers. While no specific drainer kit (e.g., Angel Drainer, Inferno Drainer) was explicitly confirmed in available intelligence, the domain's behavior aligns with established crypto drainer tactics, including fake airdrop claims and wallet connection prompts. The infrastructure suggests opportunistic abuse of GitHub Pages' trusted reputation to bypass security filters.  

 This domain resolves to IP 185.199.109.153 and is registered through GitHub, Inc., hosting via GitHub Pages. VirusTotal analysis shows 13 out of 95 security vendors flagged this domain, with no listing in Google Safe Browsing (GSB) at the time of assessment. The domain's creation date could not be determined from available data, but its active status and recent flagging indicate recent deployment. Public blocklist counts remain unverified, but the elevated VT detection ratio suggests widespread suspicion. The use of a Let's Encrypt SSL certificate adds superficial legitimacy, though it does not mitigate the underlying malicious intent.  

 As of the latest assessment, adarshbhoutekar.github.io remains active and poses an elevated risk to cryptocurrency users. Immediate action includes blocking the domain at the network and endpoint levels, and avoiding all wallet connection prompts from unsolicited links. Users who have interacted with this domain should revoke any wallet permissions granted to associated domains and transfer assets to a clean wallet. While GitHub has been notified, the domain's persistence highlights the need for proactive monitoring. The remaining risk is elevated due to the domain's active status, GitHub's hosting permissiveness, and the absence of a GSB block. Users must exercise extreme caution and treat all unsolicited crypto-related links as high-risk.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: GitHub, Inc.
- IP: 185.199.109.153

## Detection Status
- VirusTotal: 13 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/89a6e723-21b2-4298-859e-da31d0c5d852
- PhishDestroy: https://phishdestroy.io/domain/adarshbhoutekar.github.io/
- LLM endpoint: https://phishdestroy.io/domain/adarshbhoutekar.github.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/adarshbhoutekar.github.io/
Last updated: 2026-03-29