shantanu-singh13[.]github[.]io

PhishDestroy identifies shantanu-singh13.github.io as a live crypto-draining phishing domain classified under SOCIAL_ENGINEERING by Google Safe Browsing. The site is engineered to trick users into approving malicious token-transfer approvals that silently drain cryptocurrency wallets. Visitors are urged to leave immediately; any connection may result in irreversible asset loss.

This domain was flagged by 15 of 95 VirusTotal security vendors, placed on one public blocklist, and is served from IP 185.199.108.153 via GitHub Pages. The Let’s Encrypt SSL certificate provides a false veneer of legitimacy despite the underlying malicious intent. All indicators point to a recent campaign leveraging GitHub’s reputable infrastructure to bypass corporate mail filters and browser warnings.

If you encounter this domain, do not click any links or approve any wallet connection requests. Disconnect from the page immediately and clear browser cache/cookies. For wallet protection, revoke any suspicious approvals via tools such as revoke.cash and consider transferring remaining assets to a newly generated wallet. Report the domain to your security team, OpenPhish, and Google Safe Browsing to speed up global takedown.