app-olympusdao[.]xyz

Analysis indicates that app-olympusdao.xyz is an active phishing domain targeting cryptocurrency users, first registered on April 14, 2026. The domain currently resolves to 104.21.32.142, a Cloudflare-hosted address in Canada, and presents a 403 Forbidden HTTP status, suggesting access restrictions or defensive blocking. Infrastructure review reveals Cloudflare nameservers (eleanor.ns.cloudflare.com, jakub.ns.cloudflare.com) and a Let's Encrypt SSL certificate (E8), which are common among both legitimate and malicious sites but provide no inherent trust signal. The domain is flagged by five security vendors on VirusTotal and appears on one security blocklist, while AlienVault OTX records it in a threat intelligence pulse, confirming its classification as malicious by multiple independent sources. The page title 'Just a moment...' is consistent with Cloudflare interstitial pages, which may indicate the site is either behind a challenge mechanism or has been taken down at the origin. No specific phishing kit or brand impersonation details are available from the provided data, though the domain name suggests a focus on OlympusDAO or related DeFi platforms. Registration through Dynadot LLC and the use of Cloudflare infrastructure align with patterns observed in phishing campaigns seeking to evade detection. Defenders should treat this domain as high-risk, block resolution at the network level, and monitor for related subdomains or IP associations. Further analysis of the site's content—if accessible—would be required to determine the exact phishing mechanics or payload delivery methods.