appimage[.]github[.]io

PhishDestroy identifies appimage.github.io as a currently active crypto drainer impersonating GitHub, hosting malicious payloads to siphon cryptocurrency and sensitive data from unsuspecting users. This domain is under investigation as a threat to developers and users relying on GitHub’s ecosystem for trusted software distribution. This domain was flagged by 0 of 95 VirusTotal vendors, registered through GitHub, Inc., resolving to IP 185.199.108.153, and secured with a Let’s Encrypt SSL certificate. Despite its apparent legitimacy, the domain exhibits red flags including low detection rates and association with crypto drainer activity targeting cryptocurrency transactions and credentials. Users are advised to avoid interacting with this domain or any links associated with it. Verify the authenticity of software sources directly through GitHub’s official domains and enable multi-factor authentication on all cryptocurrency wallets and accounts. Report any suspicious activity involving this domain to PhishDestroy for further analysis and inclusion in blocklists.