miguel-dorante72[.]github[.]io

PhishDestroy identifies miguel-dorante72.github.io as a crypto drainer posing as a fake cryptocurrency wallet login portal. This site is designed to trick users into connecting their digital wallets under the false pretense of receiving or verifying transactions, only to drain their crypto assets instead. The attackers leverage GitHub Pages, a legitimate hosting service, to host malicious JavaScript code that executes unauthorized wallet connections and transaction signing requests without the user’s awareness. This technique exploits the trust users place in well-known platforms like GitHub, making it harder to detect the malicious intent at first glance.

This domain was flagged as a crypto drainer and is currently under investigation by PhishDestroy’s threat intelligence team. It is registered through GitHub, Inc., a legitimate domain registrar, and resolves to the IP address 185.199.108.153. Notably, this site has not yet been flagged by any of the 95 VirusTotal scanners, indicating a low detection rate among mainstream security tools. The site uses a Let’s Encrypt SSL certificate, which further adds to its legitimacy by providing a valid HTTPS connection. The absence of detections suggests that this threat is either new or evading standard detection mechanisms, making it particularly dangerous for unsuspecting users.

If you have visited miguel-dorante72.github.io, disconnect your wallet immediately and revoke any unauthorized permissions granted to the site. Review your wallet’s transaction history for any suspicious activity and consider transferring remaining assets to a secure wallet. Do not interact with any pop-ups or prompts asking for wallet connections or private key inputs. To verify the safety of this site, use PhishDestroy’s domain lookup tool and check for any updates from the PhishDestroy threat intelligence team. Always double-check URLs, avoid clicking on links from untrusted sources, and use hardware wallets for additional security when dealing with cryptocurrency transactions.