aditya-rakesh[.]github[.]io

PhishDestroy identifies a high-risk crypto drainer domain hosted on GitHub Pages, aditya-rakesh.github.io, actively distributing malicious payloads designed to steal cryptocurrency from unsuspecting users. This fraudulent domain serves as a front for a sophisticated social engineering campaign, leveraging GitHub's trusted infrastructure to lend credibility to its malicious operations. The domain resolves to IP address 185.199.110.153 and is equipped with a legitimate Let's Encrypt SSL certificate, further enhancing its deceptive appearance and likelihood of successful user compromise. This domain was flagged by 18 out of 95 VirusTotal security vendors, indicating a high level of threat recognition among industry-standard detection systems. It is registered through GitHub, Inc., exploiting the platform's free hosting services to obscure its malicious intent. The domain appears on 1 prominent security blocklist, including PhishingDB, and is explicitly flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category, confirming its involvement in fraudulent activities aimed at deceiving users. Despite these warnings, the domain remains active and poses an immediate risk to visitors. If you have visited aditya-rakesh.github.io or interacted with any content on this domain, take immediate action to secure your digital assets. Disconnect from the internet to prevent further unauthorized access, especially if you entered any login credentials, wallet addresses, or private keys. Use PhishDestroy's verification tools to scan for active threats and remove any malicious extensions or files that may have been installed surreptitiously. Report the domain to your cybersecurity team or relevant authorities and warn others to avoid this fraudulent site. Staying vigilant and leveraging trusted security resources are essential steps in mitigating the risks posed by this active crypto drainer phishing campaign.