sesbinancesupportconnect-cmd[.]github[.]io

PhishDestroy identifies sesbinancesupportconnect-cmd.github.io as an active brand impersonation domain targeting Binance users, designed to steal cryptocurrency via a crypto drainer. This GitHub-hosted page exploits the Binance brand to trick visitors into connecting malicious wallets or revealing credentials, posing a direct threat to digital assets. This domain was flagged under investigation due to its clear intent to deceive, with key indicators including registration through GitHub, resolution to IP 185.199.108.153, and a Let's Encrypt SSL certificate masking malicious activity. VirusTotal currently shows zero detections (8/95), highlighting how quickly new impersonation domains can evade automated scanning. The presence of the unique seed identifier “5d143d” in detection logs confirms its classification as a crypto drainer under active monitoring by security researchers. If you visited sesbinancesupportconnect-cmd.github.io, assume exposure: disconnect any connected wallets immediately using tools like WalletConnect or manual disconnection, revoke any granted permissions via blockchain explorers like Etherscan or BscScan, and scan your device with updated antivirus software. Never enter credentials or connect a wallet to untrusted Binance lookalikes—verify all domains against PhishDestroy before interaction.