pranav0923[.]github[.]io

PhishDestroy identifies pranav0923.github.io as an elevated-risk crypto drainer phishing domain. The threat involves malicious JavaScript that intercepts and diverts cryptocurrency transactions to attacker-controlled wallets, bypassing legitimate recipient addresses. This is not a generic phishing page; it is a specialized attack vector designed to siphon digital assets during critical moments such as wallet connections or transaction confirmations. This domain was flagged by PhishDestroy due to its active involvement in crypto drainer operations. Intelligence confirms registration through GitHub, Inc., with hosting on IP 185.199.108.153. VirusTotal analysis shows 7 out of 95 security vendors detecting malicious activity, indicating partial but significant coverage. The domain uses a Let's Encrypt SSL certificate, which does not guarantee legitimacy. While creation date is not provided, the presence of a GitHub Pages subdomain suggests recent deployment, and the domain resolves to a known infrastructure associated with crypto theft campaigns. Mitigation requires immediate action: do not visit, click, or connect wallets to pranav0923.github.io. Users who may have interacted should revoke wallet permissions via tools like revoke.cash or Phantom’s connected app manager. Block this IP (185.199.108.153) and domain at the network level. Report the domain to PhishDestroy and relevant crypto platforms. Always verify URLs manually and use hardware wallets for high-value transactions to prevent unauthorized fund transfers.