# ipshita0607.github.io — MALICIOUS

> ipshita0607.github.io is a confirmed crypto-drainer phishing domain flagged by 15/95 VirusTotal engines. Check the full report.

## Summary
PhishDestroy identifies ipshita0607.github.io as an active crypto-drainer phishing domain hosting a generic drainer kit designed to siphon cryptocurrency from unsuspecting victims. The page impersonates legitimate brands to harvest wallet credentials and initiate unauthorized transfers. No specific brand is targeted in the kit; instead, it employs generic lures to maximize victim reach. The domain resolves via GitHub Pages infrastructure, leveraging Let's Encrypt SSL to appear benign while facilitating malicious payload delivery.  This domain was flagged by 15 out of 95 VirusTotal security vendors and is blocked by Google Safe Browsing under the SOCIAL_ENGINEERING category. It resolves to IP 185.199.108.153, registered through GitHub, Inc., and was created on June 7, 2024. The domain remains unlisted on major blocklists beyond the initial detections, indicating emerging but unmitigated threat activity.  The domain remains active and accessible as of the latest scan. Immediate mitigation includes blocking the domain at the network and endpoint levels and reporting to GitHub Trust & Safety for takedown. Users are advised to avoid interacting with any links or forms on this domain. Despite current interventions, the risk remains high due to the drainer kit's adaptability and the domain's hosting on a reputable platform, enabling prolonged malicious operations.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: GitHub, Inc.
- IP: 185.199.108.153

## Detection Status
- VirusTotal: 15 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/755a6f1a-b747-41e4-a092-1c5672bf3b04
- PhishDestroy: https://phishdestroy.io/domain/ipshita0607.github.io/
- LLM endpoint: https://phishdestroy.io/domain/ipshita0607.github.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ipshita0607.github.io/
Last updated: 2026-03-24