pulsewallet[.]live

PhishDestroy identifies pulsewallet.live as an active crypto drainer domain designed to trick cryptocurrency users into revealing private keys or authorizing malicious transactions. When victims connect their wallets or enter seed phrases, this fraudulent site silently drains digital assets into attacker-controlled wallets. The domain resolves to a dedicated IP address (216.24.57.1) operated by a hosting provider with no legitimate connection to any wallet service, making it a high-risk endpoint for unsuspecting users. This domain was flagged by exactly 1 out of 95 security vendors on VirusTotal, indicating low but concerning detection. It was registered on December 2, 2025 through HOSTINGER operations, UAB, a legitimate registrar often abused by threat actors due to low-cost hosting and lax oversight. The domain holds a valid SSL certificate issued by Google Trust Services, which attackers exploit to appear legitimate and bypass browser warnings. The combination of recent registration, low detection rate, and targeted functionality (crypto draining) elevates its risk profile to 'elevated'. If you visited pulsewallet.live, immediately disconnect your wallet from the site and revoke any unauthorized connections through your wallet interface. Do not enter private keys, seed phrases, or sign any transactions. If you entered sensitive information, transfer remaining assets to a new wallet immediately and consider filing a report with local cybercrime units or blockchain forensics platforms. Monitor all wallet addresses for outgoing transactions and report suspicious activity to your wallet provider. Never use this domain for cryptocurrency storage or transactions.