# sharmilababu18.github.io — MALICIOUS

> sharmilababu18.github.io is a confirmed crypto wallet drainer posing as a legitimate site. 14/95 security vendors flagged this GitHub-hosted domain on.

## Summary
PhishDestroy identifies sharmilababu18.github.io as an active crypto wallet drainer site. The domain is designed to trick users into connecting their crypto wallets under the guise of a legitimate service or offer, then draining funds directly. This domain was flagged by OpenPhish and is associated with social engineering tactics aimed at cryptocurrency users, leveraging deceptive branding to appear credible.  

This domain resolves to IP address 185.199.108.153 and is registered through GitHub, Inc., hosted on their GitHub Pages service. VirusTotal confirms 14 out of 95 security vendors have flagged this domain as malicious. Google Safe Browsing classifies it under SOCIAL_ENGINEERING, and it appears on one security blocklist. The SSL certificate is issued by Let’s Encrypt, indicating encrypted but fraudulent traffic. While the exact creation date is not specified in the threat data, these technical indicators strongly correlate with malicious drainer kit deployments targeting unsuspecting users.  

As of latest assessment, sharmilababu18.github.io remains active and is actively serving malicious content. Users are strongly advised not to visit, click any links, or connect any wallets. Immediate action includes blocking the domain and IP at the network level, and reporting to OpenPhish and Google Safe Browsing. Despite flagging and detection, the domain’s persistence on GitHub’s platform poses ongoing risk, particularly to cryptocurrency holders who may be lured by deceptive social engineering tactics. Remain cautious of similar-sounding domains and always verify sources before engaging with crypto-related websites.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: GitHub, Inc.
- IP: 185.199.108.153

## Detection Status
- VirusTotal: 14 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 1 hits
  Lists: ["OpenPhish"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9333f789-9030-43e9-bc4e-075b6174a24e
- PhishDestroy: https://phishdestroy.io/domain/sharmilababu18.github.io/
- LLM endpoint: https://phishdestroy.io/domain/sharmilababu18.github.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/sharmilababu18.github.io/
Last updated: 2026-03-29