gentilofficial[.]github[.]io

PhishDestroy identifies gentilofficial.github.io as a generic phishing domain actively hosting a crypto drainer kit targeting users of Federico Gentili. The page title ‘Federico Gentili’ suggests impersonation, while the drainer infrastructure is designed to siphon cryptocurrency assets from unsuspecting victims. This GitHub-hosted site leverages social engineering through brand mimicry, exploiting the reputation of Federico Gentili to deceive visitors into connecting wallets or entering credentials.

Technical indicators confirm this domain’s malicious nature: VirusTotal shows 4/95 detections despite active phishing activity, indicating evasion of traditional defenses. The domain resolves to IP 185.199.108.153 and is registered through GitHub, Inc., using a Let’s Encrypt SSL certificate for legitimacy. No creation date is publicly available, but current status remains active with ongoing phishing operations.

This domain is currently active and remains unblocked by major security services, posing a high-risk threat to cryptocurrency users. Users are advised to avoid interacting with gentilofficial.github.io and verify its safety status using PhishDestroy. Immediate action includes blocking the domain at the network level, reporting to security vendors, and warning potential victims of the crypto drainer threat.