pitaes[.]io

This domain, pitaes.io, is flagged as a crypto drainer phishing site targeting users of the Pulsechain decentralized exchange (DEX) ecosystem. The page title, 'Piteas | Pulsechain Dex Aggregator,' indicates an attempt to impersonate a legitimate Pulsechain service, likely to trick users into connecting wallets and executing malicious transactions that siphon funds. Analysis of the infrastructure reveals no explicit drainer kit branding, but the domain’s association with known phishing patterns and its inclusion in multiple threat intelligence feeds strongly suggest crypto asset theft as the primary objective. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 104.255.228.119 and is hosted on an Nginx server. VirusTotal detection shows 5 out of 95 security vendors flagging the domain as malicious. The domain appears on three security blocklists, including MetaMask and PhishDestroy, and was previously listed in two AlienVault OTX threat intelligence pulses. No registrar or creation date data is available for this domain, and Google Safe Browsing (GSB) status is not explicitly documented. The combination of these indicators confirms the domain’s role in a coordinated phishing campaign. As of the latest assessment, pitaes.io has been taken offline, reducing immediate risk to users. However, the infrastructure may be reactivated or repurposed under a different domain, a common tactic in phishing operations. Users who interacted with the domain prior to its takedown remain at risk of drained funds or compromised credentials. It is recommended to revoke any wallet permissions associated with the domain, monitor transaction histories for unauthorized activity, and verify the legitimacy of any Pulsechain-related services before engagement. Continued vigilance is advised, as threat actors frequently rotate domains and IPs to evade detection.