dasdasdas[.]elysium-drainer[.]world

This domain, dasdasdas.elysium-drainer.world, was first observed on March 12, 2026 and is currently classified as a high‑risk crypto‑drainer phishing site. The page presents a generic “Just a moment…” title and returns HTTP 403, indicating that the content is deliberately hidden behind a Cloudflare challenge. The domain is actively hosted and remains reachable as of the report date, July 12 2026.

Infrastructure analysis shows the domain resolves to IP 188.114.96.3, which belongs to AS13335, Cloudflare, Inc. The hosting is protected by Cloudflare’s edge network and uses HTTP/3. Nameservers curt.ns.cloudflare.com and ariella.ns.cloudflare.com confirm the Cloudflare delegation. The TLS certificate is issued by Google Trust Services under the WE1 root, providing a valid HTTPS endpoint.

Threat intelligence indicates the site is being used as a crypto‑drainer phishing vector. VirusTotal reports that 11 of 95 scanned security vendors have flagged the domain, reflecting moderate detection across the ecosystem. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on a single blocklist, PhishDestroy. The combination of a Cloudflare‑protected front‑end, a generic page title, and the “Just a moment…” placeholder suggests the operators are attempting to evade automated content inspection while directing victims to malicious wallet‑address harvesting pages.

Defenders should block the domain at the network perimeter and add it to DNS sinkhole lists. Continuous monitoring of outbound connections to 188.114.96.3 is advised, as any successful TLS handshake may indicate compromised clients. Since the registration was performed through Web Commerce Communications Limited, future domains registered by the same registrar should be scrutinized for similar patterns. Incident response teams should also review recent logs for attempts to access the “Just a moment…” page, as these may be early indicators of phishing campaigns targeting cryptocurrency users.