chad-pro[.]fun

This domain, chad-pro.fun, is flagged as a high-risk crypto drainer phishing site designed to siphon cryptocurrency from victims through deceptive wallet interactions. Analysis indicates the threat type involves malicious smart contract approvals or fake token swaps, a common tactic in cryptocurrency theft operations. The domain’s infrastructure and behavioral patterns align with known crypto drainer campaigns, which exploit users by tricking them into authorizing transactions that transfer assets to attacker-controlled wallets. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 188.114.96.3 and was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It is currently blocked by four security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. The SSL certificate is issued by Let’s Encrypt (serial number E8), a common choice for both legitimate and malicious domains. VirusTotal reports 5 out of 95 security vendors flagging the domain as malicious, a detection ratio that, while not overwhelming, confirms its association with phishing activity. The domain remains active, indicating ongoing or recent malicious use. To mitigate risks associated with this crypto drainer threat, users should immediately revoke any smart contract approvals granted to chad-pro.fun or its associated addresses using blockchain explorers or wallet security tools. Avoid interacting with the domain or any links directing to it, and verify the authenticity of cryptocurrency-related websites through official channels. Wallet providers and security platforms should update their blocklists to include this domain and its resolving IP address. Organizations should monitor network traffic for connections to 188.114.96.3 and implement DNS-based blocking to prevent access. Given the high-risk nature of this domain, users who have previously engaged with it should audit their wallet transactions for unauthorized transfers and consider migrating assets to a new wallet if compromise is suspected.