dileepfullstackdev[.]github[.]io

PhishDestroy identifies dileepfullstackdev.github.io as an active crypto-drainer phishing site. The domain is currently serving malicious JavaScript designed to siphon cryptocurrency assets from unwitting users who connect their wallets. All evidence points to an ongoing campaign that poses an elevated risk to visitors seeking development resources.

This domain was flagged by 13 of 95 VirusTotal security vendors, indicating partial industry consensus on its malicious nature. It is registered through GitHub, Inc. and resolves to the IP address 185.199.108.153. Although GitHub Pages hosts the content, the underlying scripts execute unauthorized wallet-draining operations on visitor machines. No formal brand impersonation has been observed; rather, the attacker leverages a spoofed developer identity to build trust before deploying the crypto drainer payload. The presence of a valid Let’s Encrypt SSL certificate increases the appearance of legitimacy and lowers user suspicion.

PhishDestroy assesses this domain as active and malicious. Users who have previously connected a wallet to dileepfullstackdev.github.io should immediately revoke all session permissions via their wallet software and transfer remaining assets to a new, isolated wallet. GitHub Pages has not yet taken down the repository despite multiple takedown requests, so the threat remains live. Always verify domains using PhishDestroy’s real-time scanning before interacting with development portfolios or any site requesting wallet connections. Exercise extreme caution with GitHub-hosted pages that solicit cryptocurrency transactions or wallet integrations.