ayushh9525[.]github[.]io

PhishDestroy identifies ayushh9525.github.io as an active cryptocurrency wallet-draining site. The domain is a GitHub Pages subdomain leveraging deceptive branding to trick victims into connecting their wallets and approving malicious token-transfer permissions. No legitimate brand or drainer kit fingerprint has been publicly linked to this infrastructure yet, indicating a likely opportunistic campaign rather than a branded phishing operation.

Technical indicators confirm elevated risk: VirusTotal flags the URL with a 14/95 detection score, the page resolves to 185.199.108.153, and the domain was registered through GitHub, Inc. The SSL certificate is issued by Let’s Encrypt, and the site appears on one external blocklist. No creation date is exposed via GitHub’s public API, leaving the exact age uncertain.

This domain remains active and is currently blocked by PhishingDB. While immediate access is restricted for most users, the underlying GitHub repository could be re-enabled or mirrored elsewhere, sustaining residual risk. Users should avoid visiting the page, revoke any accidental wallet approvals via blockchain explorers, and monitor transaction histories for unauthorized transfers.