ellevesta[.]net

This domain, ellevesta.net, has been flagged with an elevated risk level for generic phishing, specifically targeting users with a crypto drainer designed to steal cryptocurrency assets. The site impersonates the legitimate Ellevesta brand, tricking visitors into connecting their wallets or entering sensitive information. PhishDestroy’s analysis confirms this threat, and the domain has been taken offline, but users should remain vigilant against similar attacks.

VirusTotal data shows that 2 out of 95 security vendors flagged this domain as malicious. The domain was created on February 28, 2026, and registered through Gname.com Pte. Ltd., a registrar sometimes associated with suspicious domains. It resolves to IP address 188.114.96.3 and uses an SSL certificate from Let's Encrypt (E7), which is common for both legitimate and malicious sites. The domain appears on 3 security blocklists, further confirming its malicious nature. The page title was "Ellevesta," indicating an attempt to impersonate the brand.

To protect against crypto drainers like this, users should always verify the authenticity of any site requesting wallet connections or private keys. Never enter seed phrases or sign transactions on unknown platforms. Use a hardware wallet for large holdings and enable two-factor authentication where possible. If you have interacted with this domain, immediately revoke any token approvals and transfer funds to a secure wallet. For further verification, always check PhishDestroy’s database before engaging with any suspicious site.