caravelassetportal[.]com

The domain caravelassetportal.com is a confirmed phishing site engaged in brand impersonation targeting Telegram users. It operated as a DeFi scam, falsely presenting itself as an affiliate program associated with the messaging platform to deceive victims into disclosing sensitive information or transferring cryptocurrency. As of the latest verification, caravelassetportal.com has been taken offline, though it previously posed an elevated risk due to its fraudulent activities.

Technical analysis reveals that caravelassetportal.com was flagged by 2 of 95 VirusTotal security vendors, including Bfore.Ai PreCrime and Gridinsoft, which assigned it a trust score of 0/100. The domain was registered through OwnRegistrar, Inc. on February 09, 2025, and resolved to the IP address 107.172.61.186, hosted by AS36352 (HostPapa) in the United States. It appeared on one security blocklist, PhishDestroy, and had no SSL certificate. The observed page title read 'Caravel Asset Portal Partners is an affiliate program from the world known digital market | Caravel Asset Portal,' reinforcing its fraudulent branding.

Individuals who interacted with caravelassetportal.com should immediately change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized transactions or account activity. Victims of cryptocurrency scams should revoke any token approvals granted to the site and transfer remaining funds to a new wallet. The domain can be reported to additional blocklists or anti-phishing organizations, such as Google Safe Browsing or the Anti-Phishing Working Group, to prevent further abuse.