anjalibhavi04[.]github[.]io

PhishDestroy identifies anjalibhavi04.github.io as a live crypto-draining threat leveraging GitHub Pages to masquerade as a legitimate web asset. This domain resolves to 185.199.108.153 and is served over a Let’s Encrypt SSL certificate, lending a veneer of authenticity that can deceive even security-aware users. The landing page is designed to trick visitors into connecting cryptocurrency wallets under the guise of a routine verification or airdrop claim, after which malicious scripts exfiltrate wallet contents and tokens via approved-signature abuse. This domain was flagged by PhishDestroy with zero VirusTotal detections (20/95 engines) as of the latest scan, indicating it remains under the radar of most automated scanners. It was registered through GitHub, Inc. and immediately weaponized, leaving little historical intelligence to rely on. No public blocklists currently list the domain, underscoring the need for proactive user vigilance rather than reactive defenses. If you visited anjalibhavi04.github.io, disconnect your wallet immediately using your wallet’s connection manager and inspect recent transaction approvals for any anomalous signatures. Change any reused passwords and enable multi-factor authentication on all critical accounts. Report the domain to your browser’s safe-browsing program and consider installing a crypto-focused security extension to monitor ongoing consent grants.