makershfc73621423[.]github[.]io

PhishDestroy identifies makershfc73621423.github.io as an active crypto-draining fake login page hosted on GitHub Pages. When visited, the site attempts to trick cryptocurrency users into connecting their wallets, then silently drains tokens without further interaction. Security vendors already flag this domain, but the page remains reachable and may lure victims through social-media links or spoofed brand impersonations. This domain was flagged by 15 of 95 VirusTotal security scanners and resolved to IP 185.199.108.153. It uses a Let’s Encrypt SSL certificate to appear legitimate, yet it was blocked by the OISD network filter shortly after its appearance. The page is served directly from makershfc73621423.github.io, a GitHub Pages subdomain created under GitHub, Inc. as the registrar, which helps the threat actors evade traditional takedowns by exploiting GitHub’s free hosting. If you visited makershfc73621423.github.io, immediately disconnect your wallet, revoke any suspicious approvals in your wallet settings, and run a reputable malware scan on your device. Do not enter credentials or connect wallets to any page linked from social media until you verify it on PhishDestroy. Report the incident to your wallet provider and consider rotating exposed private keys or using a fresh wallet for future transactions.