aryamansahu11[.]github[.]io

PhishDestroy identifies aryamansahu11.github.io as an active crypto drainer phishing domain designed to deceive users into connecting cryptocurrency wallets or entering seed phrases. This domain mimics legitimate web services to trick victims into authorizing malicious transactions that drain digital assets. Security researchers have observed this domain hosting fraudulent login portals and fake wallet interfaces to harvest private keys or initiate unauthorized transfers. Users who interact with this domain risk losing access to their cryptocurrency holdings permanently, as transactions on blockchain networks are irreversible. This domain was flagged by 21 out of 95 VirusTotal security vendors, indicating widespread recognition as a malicious entity. It resolves to IP address 185.199.108.153 and utilizes a Let's Encrypt SSL certificate to appear legitimate. Google Safe Browsing has classified this domain under SOCIAL_ENGINEERING, confirming its use in deceptive practices. Registered through GitHub, Inc., this domain leverages a trusted platform to host malicious content, increasing the likelihood of successful deception. The combination of high-risk categorization, multiple blocklist detections, and deceptive infrastructure elevates the threat level to high, requiring immediate caution from users. If you visited aryamansahu11.github.io, disconnect your wallet or device from the internet immediately to prevent unauthorized access. Do not enter any credentials or approve transactions on this site. Scan your system with updated antivirus software to detect potential malware or unauthorized access. Report this domain to PhishDestroy for verification and share any interaction details to aid in tracking this campaign. Avoid revisiting this domain and warn others who may encounter it, as blockchain-based phishing attacks often result in irreversible financial losses. Prioritize using hardware wallets and verified URLs to mitigate future risks.