block-filogenx[.]gitbook[.]io

PhishDestroy identifies block-filogenx.gitbook.io as an active crypto-draining site designed to trick visitors into connecting cryptocurrency wallets and silently siphon tokens. The moment a wallet is linked, malicious scripts execute invisible transfers to attacker-controlled addresses, causing irreversible losses. Because wallet connections require only a single click, even cautious users can fall victim within seconds of landing on the page. This domain was flagged after Cloudflare-registered infrastructure (created March 30, 2014) began receiving user reports. VirusTotal currently shows 0 detections out of 95 engines—demonstrating how rapidly evolving crypto-drainers evade signature-based detection. Historical WHOIS data confirms the registrant leverages Cloudflare’s privacy services and hides behind a Google Trust Services SSL certificate to appear legitimate. Independent blocklists such as OISD already flag the resolving IP 104.18.40.47, yet the domain remains accessible to unsuspecting visitors. If you already visited block-filogenx.gitbook.io, revoke any wallet connections immediately inside your wallet software, then run a malware scan on your device. Do not approve unknown transactions or sign any new messages until you confirm no tokens were moved. Forward the URL to PhishDestroy for updated IOCs and share your wallet address on community channels like WalletScanner so others can audit potential theft. Remain vigilant: crypto drainers thrive on urgency, so always verify links and never connect wallets on untrusted sites.