blockchainbetsclub-ai[.]pages[.]dev

This domain is flagged as a high-risk cryptocurrency wallet drainer phishing site targeting users of decentralized finance platforms. Analysis indicates the site mimics legitimate blockchain services to trick victims into connecting their wallets, enabling unauthorized token transfers and credential harvesting. The threat specifically exploits smart contract interactions to siphon funds without user consent, a tactic commonly associated with malicious dApps and fake airdrop schemes. Infrastructure analysis reveals the domain was registered through Cloudflare Pages on April 01, 2026, and currently resolves to the IP address 188.114.97.3, a Cloudflare node in Canada. The domain appears on 5 security blocklists, with 8 out of 95 security vendors on VirusTotal flagging it as malicious. The SSL certificate is issued by Google Trust Services (WE1), a common characteristic of phishing sites leveraging legitimate CDN infrastructure to evade detection. Users who visited this domain should immediately revoke any wallet connections made through the site and transfer assets to a new wallet address. All connected dApps and browser extensions should be audited for unauthorized access. Monitor transaction histories for unfamiliar smart contract interactions or token approvals, as these may indicate ongoing compromise. If credentials were entered, rotate passwords and enable multi-factor authentication on all associated accounts. Security teams should add the domain and IP to blocklists, and monitor network logs for connections to 188.114.97.3.