nguyenminhhoangc[.]github[.]io

PhishDestroy identifies nguyenminhhoangc.github.io as an active crypto drainer site designed to steal cryptocurrency by tricking visitors into connecting wallets or entering seed phrases. This is a specialized phishing attack where the attacker mimics legitimate services to drain funds directly from connected wallets without requiring traditional login credentials. The site uses deceptive interfaces to capture private keys or authorize malicious transactions through wallet connectors like WalletConnect or MetaMask integrations. This domain was flagged by PhishDestroy after appearing on 2 security blocklists and being blocked by OpenPhish and PhishingDB. It was registered through GitHub, Inc. (a common hosting provider used by attackers to bypass some security filters) and resolved to IP address 185.199.108.153. The domain uses a Let's Encrypt SSL certificate to appear legitimate. Notably, VirusTotal analysis shows this domain is flagged by 16 out of 95 security vendors, confirming its malicious nature with elevated detection rates across multiple engines. If you visited nguyenminhhoangc.github.io, disconnect your wallet immediately and revoke any unauthorized permissions through your wallet's interface or blockchain explorer tools. Do not enter any seed phrases, private keys, or wallet credentials on this site. Scan your device for malware using reputable antivirus software, especially if you interacted with wallet connections. Report any unauthorized transactions to your wallet provider and the blockchain network. Always verify URLs through official sources and use tools like PhishDestroy to check domains before entering sensitive information.