abhijeetsingh79[.]github[.]io

PhishDestroy identifies abhijeetsingh79.github.io as an elevated-risk crypto-draining phishing domain currently active in the wild and already blocked by the OpenPhish feed. The site masquerades as a legitimate service and is engineered to trick visitors into connecting a cryptocurrency wallet so that an embedded drainer can silently transfer tokens to attacker-controlled addresses. Once a wallet is linked, the drainer enumerates balances across multiple chains and initiates transfers in the background, often leaving victims unaware until balances drop to zero.

This domain was first observed on public blocklists on 2024-06-05 and was registered the same day through GitHub, Inc. hosting services. VirusTotal now flags the site with 19 individual security vendors out of 95 scanners, confirming its malicious nature. The site resolves to IP address 185.199.110.153 and uses a Let’s Encrypt SSL certificate to appear trustworthy. It has appeared on one additional third-party blocklist, reinforcing the elevated risk profile.

If you visited abhijeetsingh79.github.io, immediately disconnect your wallet from any dApps or websites and revoke any recently approved token or NFT permissions using your wallet’s built-in “Revoke” or “Disconnect” functions. Next, scan your device with an up-to-date antivirus tool and consider rotating exposed private keys or seed phrases if you suspect compromise. Report the incident to your wallet provider and file a complaint with local cybercrime units while sharing the domain on PhishDestroy for faster community blocking.