pro-helpcoin[.]pages[.]dev

This domain, pro-helpcoin.pages.dev, is flagged as a crypto wallet drainer designed to impersonate legitimate cryptocurrency wallet services. Analysis indicates the site employs deceptive interfaces to trick users into entering wallet credentials or authorizing malicious transactions, leading to unauthorized fund transfers. The threat specifically targets users of decentralized finance (DeFi) platforms, exploiting trust in wallet recovery or support pages to execute asset theft. Infrastructure analysis reveals the domain was registered on March 14, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.47.109. Despite its recent creation, the domain has already been blocked by three security blocklists, including MetaMask and PhishDestroy. VirusTotal reports 0/95 detections, suggesting the threat is either new or employs evasion techniques to avoid detection. The domain uses a Google Trust Services SSL certificate and supports HSTS and HTTP/3, which may lend it an appearance of legitimacy. Users who visited pro-helpcoin.pages.dev should immediately revoke any wallet authorizations granted to unknown or suspicious addresses. If credentials or private keys were entered, the affected wallet should be considered compromised, and all funds should be transferred to a new, secure wallet. Monitor transaction histories for unauthorized activity and report the domain to relevant security communities for further analysis. Given the domain's current offline status, users should remain vigilant for similar threats hosted on newly registered or Cloudflare-proxied domains.