rvelix[.]com

The domain rvelix.com is confirmed to be a generic phishing site, with no specific brand impersonation or crypto drainer kit identified in the current analysis. The threat posed by this domain is classified as high, indicating a significant risk to users who may visit the site or interact with its content. The domain is designed to deceive users by mimicking legitimate websites, often to steal credentials or personal information.

Infrastructure analysis reveals that rvelix.com resolves to the IP address 188.114.97.3, which is located in California, USA, and is associated with CloudFlare, Inc. The domain was created on May 18, 2026, and is secured with an SSL certificate from Let's Encrypt. According to VirusTotal, 10 out of 95 security vendors have flagged this domain as malicious. The domain is registered through NameSilo, LLC, and currently appears on 3 security blocklists. It has been identified and blocked by PhishDestroy, MetaMask, and SEAL, indicating a coordinated effort to mitigate the threat.

The domain rvelix.com is currently offline, which suggests that it has been taken down by the registrar, hosting provider, or as a result of security actions. Despite the domain being offline, the risk remains as the site could be reactivated or the actors behind the campaign could use similar infrastructure. Users are advised to avoid visiting this domain and to report any related suspicious activity to their security teams. Organizations should consider adding this domain to their internal blocklists and monitor for any further indicators of compromise.