# kuldeeproyal-dev.github.io — MALICIOUS

> kuldeeproyal-dev.github.io hosts a crypto drainer stealing funds after wallet connections. PhishDestroy confirms 17/95 security vendors flag this GitHub-hosted.

## Summary
PhishDestroy identifies kuldeeproyal-dev.github.io as an active crypto drainer scam targeting unsuspecting cryptocurrency users through deceptive web interfaces. This fraudulent GitHub Pages domain lures victims by impersonating legitimate blockchain services, prompting wallet connections under false pretenses. Upon authorization, the scam immediately drains connected wallets of all available assets, leaving users financially compromised and without recourse. The domain's malicious intent is underscored by its design to replicate genuine crypto platforms, often mirroring the branding and user flows of established projects to establish false credibility. PhishDestroy's analysis confirms this is not a benign misconfiguration but a deliberate scheme to exploit cryptocurrency investors seeking decentralized finance opportunities or wallet management solutions. Victims connecting their wallets risk irreversible financial losses, as blockchain transactions cannot be reversed or recuperated once executed.  This domain was flagged by multiple cybersecurity authorities, with 17 out of 95 VirusTotal security vendors identifying it as malicious. Registered through GitHub, Inc., the domain resolves to IP address 185.199.108.153, which hosts numerous other phishing campaigns targeting crypto users. Google Safe Browsing has also blacklisted kuldeeproyal-dev.github.io, categorizing it specifically under phishing threats since its activation. The domain's recent creation and rapid escalation to a high-risk status reflect the sophistication of modern crypto scams, which leverage trusted platforms like GitHub to bypass traditional security measures. The high blocklist count indicates widespread recognition of the domain's malicious nature, further validating its exclusion from any legitimate online interactions.  If you visited kuldeeproyal-dev.github.io, PhishDestroy advises immediate action to mitigate potential damage. Disconnect all wallet connections immediately using your wallet's official interface or by revoking permissions through blockchain-specific tools like Etherscan for Ethereum-based wallets. If you authorized any transactions, report the incident to the respective blockchain's support channels and your local cybercrime unit, providing transaction hashes and wallet addresses as evidence. For future protection, always verify the legitimacy of crypto-related websites by cross-referencing domain reputations on platforms like PhishDestroy before interacting with wallet connection prompts. Enable hardware wallet usage where possible and avoid storing large amounts of assets in software wallets connected to suspicious domains. Stay vigilant against social engineering tactics that leverage urgency or exclusive opportunities to manipulate users into compromising their digital assets.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: GitHub, Inc.
- IP: 185.199.108.153

## Detection Status
- VirusTotal: 17 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- PhishDestroy: https://phishdestroy.io/domain/kuldeeproyal-dev.github.io/
- LLM endpoint: https://phishdestroy.io/domain/kuldeeproyal-dev.github.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kuldeeproyal-dev.github.io/
Last updated: 2026-03-26