heloisacadenas[.]github[.]io

PhishDestroy identifies heloisacadenas.github.io as an active crypto drainer phishing domain designed to steal cryptocurrency from unsuspecting users. This site impersonates legitimate crypto services to trick victims into connecting wallets or entering seed phrases, enabling direct fund theft. No specific brand impersonation details are available in current intelligence, but the page structure and functionality align with known drainer kit behaviors observed in similar campaigns.

This domain resolves to IP address 185.199.108.153 and was registered through GitHub, Inc. via a free account. It carries a Let's Encrypt SSL certificate, which is commonly used to lend false legitimacy to phishing pages. The domain was flagged by OpenPhish and appears on 1 security blocklist. VirusTotal analysis shows 7 out of 95 security vendors have detected malicious activity associated with this domain, indicating moderate but concerning detection coverage.

As of the latest assessment, heloisacadenas.github.io remains active and poses an elevated risk to users who may interact with it. PhishDestroy continues to monitor this domain, and it is currently blocked at the network level in real time. However, due to the dynamic nature of phishing infrastructure and potential for rapid rebranding or server changes, users are strongly advised to avoid visiting this site and to verify any crypto-related links using PhishDestroy before taking action. The residual risk remains significant given the low detection rate and active hosting environment.