my-cakewallet[.]co[.]com

This domain, my-cakewallet.co.com, is flagged as an active crypto drainer site impersonating the legitimate Cake Wallet platform. Analysis indicates the threat actor deployed a wallet-draining kit designed to siphon cryptocurrency assets upon user interaction, typically through fake wallet connection prompts or malicious transaction signing requests. The domain mimics Cake Wallet branding, including visual elements and page structure, to deceive users into engaging with the malicious interface. Infrastructure analysis reveals the following technical indicators: the domain currently resolves to IP address 104.21.16.239, hosted on a content delivery network known for anonymizing malicious traffic. VirusTotal detection metrics show 0/95 engines flagging the domain as malicious, suggesting either a newly registered threat or effective evasion techniques. The page title, 'Welcome,' is generic and does not match the expected branding of the legitimate Cake Wallet site, which typically uses specific product nomenclature. Registrar details remain obscured due to privacy protections, and no creation date is publicly available. Google Safe Browsing (GSB) has not yet listed the domain, and no blocklist entries were identified at the time of analysis. The domain remains active, with no takedown or mitigation measures observed. Users who interacted with this domain may have exposed wallet credentials or signed malicious transactions, leading to potential asset loss. Response actions include monitoring for additional infrastructure changes, such as IP rotation or domain registrar updates, and submitting the domain to security vendors for broader detection coverage. Remaining risk is elevated due to the lack of detection by major security engines and the domain's continued operational status. Users are advised to verify wallet connections exclusively through official Cake Wallet channels and revoke any unauthorized smart contract approvals associated with this domain.