cnft-gift[.]cielstakepool[.]com

PhishDestroy identifies cnft-gift.cielstakepool.com as an active crypto drainer campaign impersonating an NFT gift giveaway. The domain leverages a fraudulent seed phrase (bba458) to deploy a malicious drainer kit targeting cryptocurrency wallets under the guise of a promotional event. While the domain mimics legitimate NFT platforms, its sole purpose is to siphon assets via deceptive wallet connection prompts. This domain was flagged with a 0/95 VirusTotal detection score, indicating it remains undetected by security vendors. Registered through Cloudflare, Inc. on August 13, 2022, it resolves to IP 172.67.183.193 and operates under a Google Trust Services SSL certificate. The domain has not been flagged by Google Safe Browsing (GSB) and remains absent from major blocklists, allowing continued operation. The campaign is currently active, with no known takedown actions recorded. Users are advised to block the domain at the network level and avoid interacting with any links or wallet connection prompts. Despite low detection rates, the risk of asset loss remains critical due to the drainer’s sophisticated social engineering tactics. Immediate reporting to wallet providers and security teams is recommended to mitigate further exposure.