elysnltd[.]com

This domain is flagged as an elevated-risk brand impersonation phishing site targeting Elysian Capital, a legitimate financial entity. Analysis indicates the infrastructure was designed to mimic corporate branding, likely to deceive victims into disclosing sensitive credentials or financial information. The domain exhibits characteristics consistent with credential harvesting campaigns, including the replication of corporate visual identities and the absence of legitimate business indicators. Infrastructure analysis reveals the domain elysnltd.com was registered on November 13, 2025, through Tucows Domains Inc., a registrar frequently observed in phishing operations. The domain resolves to the IP address 104.21.9.29, which is part of Cloudflare, Inc.’s network (AS13335) and geolocated in the United States. At the time of assessment, the domain lacked an SSL certificate, a red flag for malicious activity. Detection metrics confirm its malicious classification, with 9 out of 95 security vendors on VirusTotal flagging the domain as phishing-related. Additionally, the domain appears on one security blocklist and was actively blocked by at least one anti-phishing system prior to being taken offline. Mitigation measures for this threat type include immediate domain blacklisting in enterprise security gateways and endpoint protection systems. Network administrators should block traffic to and from the IP address 104.21.9.29 and monitor for residual connections from compromised endpoints. Organizations impersonated by such domains should issue internal alerts to employees, emphasizing verification of domain authenticity before entering credentials. Users who may have interacted with the domain should reset passwords for any accounts accessed during the exposure window and enable multi-factor authentication where available. Given the domain’s recent creation date and rapid detection, continuous monitoring of newly registered domains with similar naming patterns is recommended to preempt future campaigns.