sentpuls[.]com

This domain, sentpuls.com, is actively engaged in cryptocurrency phishing operations designed to function as a wallet drainer. Analysis indicates it impersonates legitimate wallet interfaces to deceive users into entering private keys or seed phrases, enabling unauthorized access and asset theft. The infrastructure is specifically tailored to target users of decentralized finance platforms, with malicious scripts embedded to automate fund transfers upon credential submission. Technical indicators confirm the domain's malicious nature. Registered on April 23, 2026, through Name SRS AB, sentpuls.com resolves to the IP address 103.45.64.7, hosted by CTG Server Limited in Hong Kong (AS152194). It holds a Let's Encrypt SSL certificate, which while standard for encryption, is frequently exploited by threat actors to lend a false sense of legitimacy. The domain appears on three security blocklists and is flagged by 2 out of 95 security vendors on VirusTotal, including detections for generic phishing and wallet-specific threats. The discrepancy between the creation date (2026) and current detection activity suggests either a typo-squatting attempt or an error in domain registration records, though the active phishing campaign remains verifiable. Users who have interacted with sentpuls.com should immediately revoke any connected wallet permissions and transfer remaining assets to a new, secure wallet. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where available. If private keys or seed phrases were entered, assume full compromise of the wallet and cease its use entirely. Report the domain to relevant security teams and consider notifying affected platforms to prevent further exploitation. Proactive measures, such as browser-based blocklists and endpoint protection, should be employed to mitigate future exposure to similar threats.