ellipal-wc[.]com

This domain, ellipal-wc.com, is actively flagged as a high-risk brand impersonation targeting WalletConnect, a widely used protocol for connecting cryptocurrency wallets to decentralized applications. Analysis indicates the domain was registered on November 21, 2023, through Tucows Domains Inc. and currently resolves to the IP address 154.0.161.71. The infrastructure is hosted on an Nginx web server and secured with a Let's Encrypt SSL certificate, a common configuration for both legitimate and malicious sites. The page title, 'Ellipal Wallet Connect,' explicitly references the targeted brand, reinforcing the impersonation intent. Threat intelligence sources confirm the domain's malicious classification. It appears on two security blocklists and has been documented in 23 threat intelligence pulses on AlienVault OTX. Gridinsoft assigns a trust score of 0/100, and the domain is blocked by PhishDestroy and BLP-Malware. While three of 95 security vendors on VirusTotal flag the domain, the absence of broader detection does not diminish the confirmed indicators of compromise. The domain remains active as of July 12, 2026, posing an ongoing risk to users who may mistake it for a legitimate WalletConnect service. Defenders should treat this domain as a confirmed phishing resource and implement blocking measures at the network and endpoint levels. Given the domain's age and persistent activity, monitoring for related infrastructure or newly registered lookalike domains is recommended. The exact content and functionality of the site have not been analyzed, but the combination of brand impersonation, low trust scores, and active blocklisting justifies immediate containment actions.