chainspulse[.]pages[.]dev

PhishDestroy identifies chainspulse[.]pages[.]dev as an active crypto drainer scam site designed to steal cryptocurrency from unsuspecting users. The fraudulent domain mimics a legitimate service to trick visitors into connecting their crypto wallets, where drainer scripts silently transfer funds to attacker-controlled addresses. These sites exploit trust in well-known brands or services to increase the chances of victims falling for the scam, often through phishing emails, social media links, or malicious ads. This domain was flagged through automated threat intelligence pipelines focusing on crypto drainer infrastructure. Key technical indicators include a Google Trust Services SSL certificate, resolution to IP address 172.66.44.196, and registration via Cloudflare, Inc. Initial VirusTotal analysis shows 0 detections out of 95 scanners, indicating that most antivirus and security tools have not yet identified the site’s malicious nature. The domain is hosted on Cloudflare Pages, a legitimate service often abused by threat actors to rapidly deploy and rotate malicious infrastructure while maintaining anonymity. If you visited chainspulse[.]pages[.]dev or entered any cryptocurrency wallet information, immediately disconnect your wallet from the site and revoke any unauthorized connections through your wallet’s security settings. Transfer any remaining assets to a new wallet if you suspect compromise. Report the domain to PhishDestroy and monitor your wallet transactions for unusual activity. Do not interact with similar links or websites and always verify URLs through official channels before entering sensitive information.