pitaes[.]org

This domain operates as a crypto drainer phishing site targeting users of the PulseChain ecosystem by impersonating Piteas, a legitimate decentralized exchange aggregator. The site is designed to trick visitors into connecting their cryptocurrency wallets, at which point malicious smart contracts execute unauthorized token transfers, draining funds without user consent. Analysis of the page content reveals authentic-looking PulseChain branding elements, transaction simulation interfaces, and wallet connection prompts commonly used in crypto drainer schemes. Infrastructure analysis provides multiple indicators of malicious activity. The domain was registered through eNom, LLC on May 20, 2026, with an anomalous future creation date suggesting potential registration data manipulation. VirusTotal detection shows 3 out of 95 security vendors flagging the domain as malicious, while it appears on three separate security blocklists. The site resolves to IP address 104.21.68.126 and uses Cloudflare services, including Browser Insights and HTTP/3 protocol. Additional threat intelligence confirms the domain's presence in two AlienVault OTX pulses, with active blocking by multiple wallet security providers. Users who visited pitaes.org should immediately disconnect any connected wallets from the site and revoke all smart contract approvals through their wallet interface. It is critical to check wallet transaction history for unauthorized transfers, particularly those involving PulseChain or related tokens. Affected users should transfer remaining assets to a new wallet address and monitor for suspicious activity. The domain currently shows offline status, but similar crypto drainer operations frequently reappear under different domains. Users should verify all PulseChain-related services through official channels before connecting wallets or approving transactions.