earnelvfe-bxnjai[.]xyz

The domain earnelvfe-bxnjai.xyz was set up as part of a phishing campaign designed to steal cryptocurrency. It posed as EarnElite, a fake platform that likely tricked users into connecting their wallets or entering private keys, which would then drain their funds. This type of threat, known as a crypto drainer, is especially dangerous because it can empty a wallet in seconds without requiring a password leak. The site is now offline, but the infrastructure remains a risk if it resurfaces.

PhishDestroy's investigation uncovered several red flags. The domain was registered on February 21, 2026 through Spaceship, Inc., a common registrar for malicious sites. Security scans on VirusTotal show that 3 out of 95 vendors flagged this domain as malicious, indicating strong community consensus about its danger. The site resolved to IP address 104.21.64.14 and used an SSL certificate from Google Trust Services, which gave it a false sense of legitimacy. It also appeared on one security blocklist, further confirming its malicious nature.

If you visited earnelvfe-bxnjai.xyz and entered any information—especially cryptocurrency wallet details or seed phrases—immediately move your funds to a new wallet that has never been exposed. Revoke any permissions you may have accidentally granted to the site. Run a full security scan on your device and monitor your accounts for suspicious activity. For real-time updates and to report similar threats, visit PhishDestroy's complete intelligence report using the unique seed 96c832.