abhishek-akkal[.]github[.]io

PhishDestroy has flagged the domain abhishek-akkal.github.io as a high-risk crypto drainer impersonating a fake login page, designed to harvest credentials and digital assets from unsuspecting users. This domain leverages GitHub Pages to host its malicious infrastructure, resolving to the IP address 185.199.108.153, while remaining accessible via a Let's Encrypt SSL certificate to appear legitimate. The threat actor behind this campaign has registered the domain through GitHub, Inc., a tactic often used to evade traditional detection mechanisms and exploit trusted hosting environments. This domain has been widely recognized as malicious, with 8 out of 95 security vendors on VirusTotal flagging it, while OpenPhish has already blocked it. Additionally, it appears on 1 known security blocklist, highlighting its prevalence and the urgency for users to exercise caution. The domain remains active despite these detections, indicating ongoing malicious activity aimed at deceiving users into surrendering sensitive information or cryptocurrency funds. The use of GitHub Pages further complicates detection, as the platform is typically trusted by users and enterprises alike. If you have interacted with this domain or suspect you may have fallen victim to its scheme, immediately cease any further engagement and disconnect from the platform. Scan your devices for malware or unauthorized access, and revoke any session tokens or API keys exposed during the interaction. Consider changing passwords and enabling multi-factor authentication on critical accounts, especially those tied to cryptocurrency wallets or exchanges. Report the domain to PhishDestroy for further analysis and validation, and avoid clicking any links or downloading files from this or similar suspicious domains in the future.