dyl4n113[.]github[.]io

PhishDestroy identifies dyl4n113.github.io as an active crypto drainer phishing site designed to steal cryptocurrency from unsuspecting users. This malicious domain impersonates legitimate services by leveraging GitHub Pages hosting, which provides a veneer of credibility while concealing its true intent. The threat actor behind this domain uses deceptive tactics to trick users into connecting their crypto wallets or entering private keys, ultimately draining funds without consent. Technical analysis reveals that the domain is engineered to appear as a legitimate service, often mimicking popular platforms to exploit user trust and urgency in crypto transactions. This domain was flagged by multiple security vendors and blocklists, confirming its malicious nature. PhishDestroy analysis shows that dyl4n113.github.io is detected by 11 out of 95 VirusTotal security vendors, indicating a high risk of compromise. The domain is registered through GitHub, Inc., which is a common hosting provider exploited by threat actors to deploy phishing infrastructure due to its trusted reputation. Additionally, this domain appears on two prominent security blocklists, including OpenPhish and OISD, further validating its malicious status. The domain resolves to the IP address 185.199.108.153 and uses a Let's Encrypt SSL certificate, which may give users a false sense of security by displaying a valid HTTPS connection. The combination of GitHub hosting, a valid SSL certificate, and multiple detections underscores the sophisticated nature of this phishing operation. If you have visited dyl4n113.github.io, PhishDestroy advises immediate action to secure your accounts and assets. Disconnect any connected crypto wallets from the site and revoke any permissions granted to suspicious domains or applications. Scan your devices for malware or unauthorized access, as threat actors may have deployed additional payloads. If you entered any private keys, seed phrases, or wallet credentials, transfer your remaining funds to a new, secure wallet immediately and consider the compromised wallet permanently compromised. Use PhishDestroy's verification tools to check for additional threats and report this domain to help protect the community from ongoing attacks.