bijaybarman2004-ship-it[.]github[.]io

PhishDestroy identifies bijaybarman2004-ship-it.github.io as an active crypto-draining phishing domain designed to steal cryptocurrency by tricking users into connecting their wallets. This site masquerades as a legitimate shipping or logistics portal but instead loads malicious scripts that drain funds from connected crypto wallets. Unsuspecting visitors who approve wallet connections risk irreversible financial loss, with funds immediately transferred to attacker-controlled addresses. This domain was flagged by PhishDestroy after 8 out of 95 VirusTotal security vendors detected malicious content, and it is currently blocked on OpenPhish. It resolves to IP address 185.199.108.153 and is registered through GitHub, Inc. using a Let's Encrypt SSL certificate. The domain is part of a growing trend of phishing campaigns leveraging GitHub Pages to host malicious payloads, exploiting the platform's trustworthiness to evade detection. The registration method and infrastructure choice suggest opportunistic abuse of legitimate hosting services. If you visited bijaybarman2004-ship-it.github.io, immediately disconnect your wallet from the site and revoke any unauthorized permissions in your wallet settings. Do not approve any unexpected connection requests or transactions. Run a full system scan using updated antivirus software and consider rotating wallet keys or addresses if compromised. Report the incident to your wallet provider and file a complaint with PhishDestroy to help block further abuse. Always verify URLs and use trusted sources before entering sensitive information or connecting digital assets.