pulse-platform[.]xyz

Analysis of pulse-platform.xyz indicates an active crypto drainer phishing domain targeting users through a purported AI-powered prediction market platform. The domain was registered on May 2, 2026, via Go Daddy, LLC, and currently resolves to the IP address 185.158.133.1, located in Germany. Infrastructure analysis reveals the use of Cloudflare, which may obscure backend hosting details, alongside HSTS implementation, suggesting an attempt to appear legitimate through security headers. Nameservers ns23.domaincontrol.com and ns24.domaincontrol.com are consistent with registrar-provided defaults, offering no immediate anomalies but no distinguishing protective features either. The domain is flagged by two security vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy. The SSL certificate, issued by Google Trust Services (WE1), aligns with common phishing tactics leveraging trusted certificate authorities to bypass initial browser warnings. The page title, 'Pulse Platform AI - AI-Powered Prediction Markets,' suggests a focus on cryptocurrency or financial prediction services, a common lure for crypto drainer schemes. No specific brand impersonation is confirmed from available data, and the exact content or functionality of the site remains unanalyzed. Defenders should prioritize blocking this domain at DNS and web gateway levels, particularly in environments where cryptocurrency-related activity is prohibited or monitored. The IP address 185.158.133.1 should be investigated for additional associated domains, and the nameserver pair may warrant broader scrutiny for similar threats. Given the domain's recent registration and active status, monitoring for shifts in hosting or SSL certificate changes is recommended to preempt evasion attempts.