cavolex[.]com

PhishDestroy identifies cavolex.com as an active cryptocurrency drainer site engineered to siphon funds from unsuspecting crypto wallet holders. This domain masquerades as a legitimate service, likely leveraging brand impersonation or fraudulent investment schemes to lure victims into connecting their wallets. Technical analysis indicates the use of a drainer kit designed to exfiltrate private keys or authorize malicious transactions upon wallet connection. The attackers behind cavolex.com employ deceptive tactics such as spoofed interfaces or fake reward systems to entice users into interacting with the site.

This domain was flagged with precise indicators: 0 detections on VirusTotal out of 95 engines, registered through MAT BAO CORPORATION on March 30, 2026, resolving to IP 172.67.137.94 with a Let's Encrypt SSL certificate. The domain remains unlisted on Google Safe Browsing (GSB) and has not yet been widely blocked across threat intelligence platforms. Due to its recent creation and low detection rate, cavolex.com poses a heightened risk to cryptocurrency users who may encounter it through social media promotions, phishing emails, or fraudulent advertisements.

Cavolex.com is currently active and under active monitoring by PhishDestroy. Users are advised to avoid interacting with the domain, refrain from connecting wallets, and report any suspicious activity. The domain's low detection score and recent registration suggest potential for escalation; therefore, immediate action is recommended for organizations and individuals in the cryptocurrency space. Blocking the domain at the network level and updating firewall rules to include IP 172.67.137.94 are critical steps to mitigate exposure.