provex-app[.]com

This domain, provex-app.com, is identified as a crypto wallet drainer phishing site designed to impersonate legitimate cryptocurrency wallet services. Analysis indicates the infrastructure is engineered to harvest wallet credentials and execute unauthorized transactions, a tactic commonly associated with cryptocurrency theft operations. No specific brand impersonation has been confirmed, but the domain naming convention suggests an intent to mimic decentralized finance (DeFi) or wallet management platforms. The absence of a known drainer kit signature does not preclude the use of custom or obfuscated malicious scripts targeting wallet extensions and mobile applications. Infrastructure analysis reveals the domain was registered on March 26, 2026, through Ultahost, Inc., a registrar frequently utilized in transient phishing campaigns. The domain resolves to the IP address 188.114.96.3, which has been observed in prior malicious activity clusters. Detection metrics indicate a VirusTotal score of 15/95, with security vendors flagging the domain for generic phishing and credential theft behaviors. The domain appears on two independent security blocklists, and its Gridinsoft trust score is 0/100, further corroborating its malicious classification. Google Safe Browsing (GSB) status is not explicitly provided, but the domain's offline status suggests temporary takedown or evasion tactics. As of the latest assessment, provex-app.com has been taken offline, likely due to registrar intervention or hosting provider suspension. However, the elevated risk level persists due to the domain's recent registration and the transient nature of such campaigns. Users who interacted with the domain prior to its takedown are advised to revoke any connected wallet permissions, monitor transaction histories for unauthorized activity, and rotate credentials for associated accounts. Organizations should update blocklists to include this domain and its resolving IP to mitigate residual risk from potential re-activation or domain re-registration under altered infrastructure.