catx[.]click

PhishDestroy identifies catx.click as an active crypto drainer phishing domain under investigation. This domain is currently flagged as a generic phishing site with emerging malicious intent targeting cryptocurrency users.

This domain was registered through Sav.com, LLC on March 23, 2026, and resolves to IP address 188.114.97.3. Despite being equipped with a Let's Encrypt SSL certificate, the domain remains undetected by VirusTotal's vendor network, showing 0 detections out of 95. This low detection rate, combined with its recent registration, suggests a rapidly evolving threat that has not yet been widely recognized by security vendors. The lack of presence on major blocklists and neutral trust scores further indicate its early-stage deployment.

As of the latest intelligence, catx.click remains an active threat with no current blocklist presence. Given its association with crypto drainer phishing, users are strongly advised to avoid interacting with this domain, especially any requests involving cryptocurrency transactions or wallet connections. Security teams should consider proactively blocking the IP address 188.114.97.3 and monitoring for related domains registered through Sav.com, LLC. Immediate implementation of network-level protections and user awareness campaigns are recommended to mitigate potential exposure.