pinkasale-finance-bsc[.]pages[.]dev

PhishDestroy’s automated systems flagged pinkasale-finance-bsc.pages.dev as a live crypto drainer campaign masquerading as the Genesis Portals Presale. The deceptive page title—“Portals Presale powered by Genesis”—is designed to trick cryptocurrency users into connecting wallets and signing malicious transactions. The domain leverages Cloudflare for rapid DNS resolution and benefits from a Google Trust Services SSL certificate to appear legitimate while hosting wallet-draining scripts. Intelligence indicates the page remains active and continues to harvest private keys or authorize malicious token approvals. This domain was flagged with a VirusTotal detection score of 0/95 at the time of analysis, indicating no current blocklist coverage despite clear malicious intent. It resolves to IP 188.114.96.3 and is registered through Cloudflare, Inc., leveraging the provider’s infrastructure to evade takedowns and maintain availability. The page was detected on seed 15a708 and continues to operate under an active status, with no visible mitigation from hosting or registrar layers. If you visited pinkasale-finance-bsc.pages.dev, disconnect your wallet immediately, revoke any unauthorized token approvals via tools like revoke.cash, and transfer remaining assets to a clean wallet. Report the domain to your browser’s safe-browsing program and cryptocurrency platforms. Avoid re-engaging with any links or QR codes associated with this campaign to prevent further loss.