portal-kelpdao[.]co

The domain portal-kelpdao.co has been identified as a generic phishing threat, specifically a crypto drainer designed to steal cryptocurrency credentials. The site is currently offline, which likely indicates it was taken down after being reported. While no specific brand was explicitly impersonated in the page title, the domain naming convention suggests it may have been mimicking a legitimate DeFi or Kelp-related platform.

PhishDestroy's investigation reveals that portal-kelpdao.co was flagged by 2 out of 95 VirusTotal security vendors, indicating a relatively low detection rate at the time of analysis. The domain was registered through Dynadot Inc and created on April 18, 2026, with an IP address of 188.114.96.3. It appeared on 3 security blocklists, and its SSL certificate was issued by Let's Encrypt (E7). These technical indicators underscore the sophisticated nature of the phishing campaign, which leveraged a seemingly legitimate certificate to appear trustworthy.

As the domain is now offline, the immediate risk of interaction is low; however, users should remain vigilant as similar domains may emerge. PhishDestroy recommends that users never enter sensitive information on unknown sites, always verify URLs against official sources, and enable two-factor authentication on all crypto accounts. If you encounter this domain or similar variants, report them to PhishDestroy and relevant cybersecurity authorities.