# mayank25k.github.io — MALICIOUS

> PhishDestroy flags mayank25k.github.io as a crypto drainer on GitHub Pages. 12/95 security vendors detect this phishing site impersonating legitimate services.

## Summary
PhishDestroy identifies mayank25k.github.io as an active crypto drainer campaign hosted on GitHub Pages. This domain is configured to trick users into connecting wallets under the guise of token airdrops or giveaways, then silently siphoning cryptocurrency assets via malicious smart contract interactions. Affected users typically experience irreversible wallet drainages within seconds of approval, with funds routed through obfuscated blockchain transactions to evade tracking. The infrastructure leverages GitHub’s free hosting service to appear legitimate, exploiting trust in well-known domains to bypass email and browser security filters.

This domain was flagged by 12 out of 95 VirusTotal security vendors and blacklisted by Google Safe Browsing under the SOCIAL_ENGINEERING category. It resolves to IP 185.199.108.153 and is registered through GitHub, Inc., utilizing a Let’s Encrypt SSL certificate to enhance credibility. Although creation metadata is not explicitly provided, the campaign is currently active and continuously evolving to evade detection. The combination of GitHub hosting, SSL encryption, and partial detection rates highlights a sophisticated evasion technique commonly used in modern crypto-draining operations.

Users who visited mayank25k.github.io should immediately disconnect their wallets from any active sessions, revoke suspicious smart contract approvals via tools like revoke.cash or Etherscan, and transfer remaining assets to a clean wallet. Enable hardware wallet signing for all transactions and avoid clicking unverified links or approving unknown contracts. Monitor transaction histories closely and report suspicious addresses to blockchain forensics platforms. PhishDestroy recommends verifying domains through its threat intelligence portal before interacting with any crypto-related websites.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: GitHub, Inc.
- IP: 185.199.108.153

## Detection Status
- VirusTotal: 12 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/cafa4850-677c-4882-8fbf-9a247da0b802
- PhishDestroy: https://phishdestroy.io/domain/mayank25k.github.io/
- LLM endpoint: https://phishdestroy.io/domain/mayank25k.github.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mayank25k.github.io/
Last updated: 2026-03-24