elio-drop[.]xyz

elio-drop.xyz is a newly registered domain (created 17 August 2025) that has been linked to a crypto‑related brand impersonation campaign targeting Coinbase. The site title observed in the limited crawl is "$RICH Distribution", which aligns with the advertised crypto scam narrative. The domain resolves to the IPv6 address 2a02:4780:1:466:0:1d46:3405:9, which is announced by AS47583 Hostinger International Limited and geolocated to the United States. The SSL certificate presented is identified as "WR1", providing no indication of a trusted certificate authority.

Infrastructure analysis shows a Gridinsoft trust score of 0 out of 100, indicating a lack of reputation. The domain appears on two independent blocklists and has been actively blocked by PhishDestroy and ScamSniffer, confirming that security vendors have taken mitigation steps. VirusTotal data reports three of ninety‑five scanning engines flagging the domain, reinforcing the suspicion of malicious intent. The registrar information points to HOSTINGER operations, UAB, a common registrar for disposable or low‑cost domains.

Current online status is offline, but the presence of the malicious indicators suggests that the domain could be re‑activated or used in other campaigns. Defenders should add the IPv6 address and the domain to network‑level deny lists, monitor for any resurgence of the host, and enforce brand‑specific filtering for Coinbase‑related traffic. Continuous observation of the hosting provider’s IP range and rapid response to any future resolution of the domain are recommended to mitigate potential crypto‑scam exposure.