blockchainbets-app[.]pages[.]dev

This domain, blockchainbets-app.pages.dev, operates as a crypto staking drainer phishing site targeting users of the BCB token platform. The page presents itself as "BCB Staking v2," a fraudulent version of a legitimate staking service, designed to trick victims into connecting cryptocurrency wallets. Once connected, the site executes unauthorized transactions, draining funds from the victim’s wallet by exploiting smart contract interactions or signature requests. The threat specifically targets users familiar with decentralized finance (DeFi) platforms, leveraging social engineering tactics to mimic legitimate staking interfaces.

Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on October 03, 2024, and currently resolves to the IP address 172.66.47.180, located in Canada. Despite its recent creation, the domain has already been flagged on 2 security blocklists, including PhishDestroy and ScamSniffer. VirusTotal reports 0 detections out of 95 security engines, indicating the site remains undetected by most automated scanning tools. The SSL certificate is issued by Google Trust Services (WE1), a common provider for both legitimate and malicious domains, which does not inherently indicate trustworthiness in this context.

Users who have visited blockchainbets-app.pages.dev and connected a wallet should immediately revoke any active smart contract approvals associated with the site. This can be done using blockchain explorers or wallet management tools that support token approval revocation. Affected individuals should also monitor their wallet transaction history for unauthorized transfers and consider transferring remaining assets to a new wallet if suspicious activity is detected. Due to the low detection rate on VirusTotal, traditional antivirus or endpoint protection may not flag this threat, emphasizing the need for manual verification of connected sites and wallet permissions.