pitaes[.]co

The domain pitaes.co has been identified as a crypto drainer impersonating a decentralized exchange (DEX) aggregator on PulseChain. Analysis indicates the site is designed to deceive users into connecting wallets, enabling unauthorized token transfers. As of the latest assessment, the domain is offline, though prior activity suggests malicious intent targeting cryptocurrency holders. Infrastructure analysis reveals the domain was registered through ENOM, INC. and resolves to the IP address 172.67.196.84, a Cloudflare-hosted endpoint. Security vendors flagged the domain in 3 of 95 VirusTotal scans, while it appears on three independent security blocklists. The site’s SSL certificate is issued by Google Trust Services, and its trust score is rated 0/100 by Gridinsoft. Additional detection sources include MetaMask, PhishDestroy, and SEAL, all of which have blocked access to the domain. Technologies detected on the site include Cloudflare Browser Insights and HTTP/3, commonly used to obfuscate malicious activity. Given the domain’s current offline status, the immediate threat of active exploitation is mitigated. However, historical indicators confirm its use in crypto drainer operations. Users are advised to revoke any wallet connections previously authorized to pitaes.co and monitor transaction histories for unauthorized activity. Security teams should update blocklists to include this domain and its associated IP. Cryptocurrency platforms are recommended to issue warnings to users who may have interacted with the site prior to its takedown.