signup-edel[.]xyz

This domain, signup-edel.xyz, is identified as a crypto wallet drainer phishing site designed to harvest credentials and siphon digital assets from unsuspecting users. Analysis indicates the domain is currently offline, displaying a 504: Gateway time-out error, though prior activity confirms malicious intent targeting cryptocurrency holders. Infrastructure analysis reveals the domain was registered on February 27, 2026, through Dynadot LLC, a registrar frequently associated with phishing campaigns. It resolves to the IP address 104.21.66.82 and is protected by a Google Trust Services SSL certificate, leveraging Cloudflare’s network and HTTP/3 protocol for obfuscation. Security vendors on VirusTotal flagged the domain, with 4 of 95 engines detecting malicious activity. The domain appears on three security blocklists, including MetaMask and PhishDestroy, further corroborating its phishing classification. The page title, "signup-edel.xyz | 504: Gateway time-out," suggests recent takedown efforts or backend failures. Given the domain’s elevated risk level and confirmed malicious infrastructure, users are advised to treat any prior interactions with signup-edel.xyz as compromised. Organizations should update blocklists to include this domain and its associated IP address. Cryptocurrency holders should verify wallet addresses independently and enable multi-factor authentication on all accounts. Monitoring for similar domains registered through Dynadot LLC or resolving to 104.21.66.82 is recommended to preempt further phishing attempts.