spjezioranye[.]github[.]io

PhishDestroy has identified spjezioranye.github.io as a malicious domain actively hosting a crypto drainer disguised as a fake login portal. This domain mimics legitimate authentication interfaces to trick users into surrendering their cryptocurrency wallet credentials or private keys. The attackers leverage GitHub Pages for hosting to evade traditional security filters, while the Let's Encrypt SSL certificate adds superficial legitimacy to phishing lures. Users who interact with this domain risk immediate asset loss, as drained funds are typically transferred to attacker-controlled wallets within minutes of credential submission.

This domain was flagged through PhishDestroy’s automated pipeline after resolving to GitHub’s IP range (185.199.108.153) and generating a Let’s Encrypt certificate. VirusTotal currently records 0 detections out of 95 engines, indicating this threat remains under the radar for most antivirus solutions. The domain’s recent creation via GitHub Pages suggests opportunistic deployment, possibly targeting trending cryptocurrency platforms or social media campaigns to maximize victim engagement.

If you visited spjezioranye.github.io, immediately disconnect from the internet to halt any ongoing malicious transactions. Revoke any permissions granted to connected wallets through your blockchain explorer (e.g., Etherscan for Ethereum) and transfer remaining assets to a new, secure wallet. Report the domain to PhishDestroy via our portal to aid in takedown efforts. Enable hardware wallet authentication or multi-signature schemes for critical accounts to mitigate future risks. Monitor transaction histories for unauthorized transfers and consider deploying a crypto-specific firewall or browser extension to block drainer domains.