v2-solavre[.]com

This domain, v2-solavre.com, operates as a crypto wallet drainer specifically designed to impersonate solavre.cc, a legitimate cryptocurrency platform. Analysis indicates the site employs deceptive interfaces to trick users into connecting their wallets, enabling unauthorized transactions that siphon digital assets directly to attacker-controlled addresses. The threat extends beyond credential theft, as the infrastructure is engineered to execute automated scripts that bypass typical security warnings, resulting in immediate and irreversible asset loss for victims. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with fraudulent domains. Security vendors have flagged the domain on VirusTotal, with 17 out of 95 engines detecting malicious behavior. Additionally, the domain appears on five independent security blocklists, further corroborating its classification as a high-risk threat. The page title, www.www.solavre.cc, is a deliberate attempt to mimic the legitimate platform’s branding, increasing the likelihood of successful deception. Users who visited v2-solavre.com should immediately disconnect any connected wallets from the site and revoke all associated smart contract approvals using a trusted blockchain explorer. It is critical to transfer remaining assets to a new, secure wallet and monitor transaction histories for unauthorized activity. If credentials or private keys were entered, assume full compromise and cease using the exposed wallet. Security teams should update blocklists to include this domain and its associated indicators, such as the registrar details and creation date, to prevent further exploitation.