fardin-rajpura[.]github[.]io

PhishDestroy identifies fardin-rajpura.github.io as a high-risk crypto drainer actively hosting malicious scripts designed to siphon cryptocurrency from unsuspecting victims. This GitHub Pages domain leverages social engineering tactics to impersonate legitimate services, tricking users into connecting crypto wallets or entering seed phrases, which are then exploited by threat actors. The domain’s infrastructure is purpose-built for fraudulent financial gain, making it a critical threat to cryptocurrency holders. This domain was flagged by Google Safe Browsing under SOCIAL_ENGINEERING, with 17 out of 95 VirusTotal security vendors detecting malicious activity. Registered through GitHub, Inc., the domain resolves to IP address 185.199.108.153 and operates under a Let's Encrypt SSL certificate, which does not indicate safety. The presence of a legitimate certificate issuance should not be misconstrued as a sign of trustworthiness, as threat actors frequently exploit free certificates to lend credibility to scams. The domain’s infrastructure is hosted on GitHub’s servers, but this does not absolve it of malicious intent, as GitHub Pages can be abused for hosting phishing and drainer scripts. The risk level for fardin-rajpura.github.io is assessed as high due to its active deployment of cryptocurrency drainer scripts. To mitigate exposure, users must avoid visiting this domain entirely. If you have already interacted with this site—especially by connecting a wallet or entering sensitive information—immediately revoke any connected wallet permissions and transfer remaining assets to a secure, offline wallet. Enable multi-factor authentication (MFA) on all crypto accounts and use hardware wallets for additional protection. Report the domain to your browser’s blocklist and share it with relevant crypto communities to prevent further victimization. Always verify the legitimacy of websites through official channels before engaging, particularly those promoting crypto services.