irysnetwork[.]com

The domain irysnetwork.com has been identified as a phishing site specifically designed to operate as a cryptocurrency wallet drainer. This type of threat targets users by impersonating legitimate wallet interfaces or crypto-related services to trick victims into connecting their wallets, enabling attackers to siphon funds automatically. As of the latest verification, the domain has been taken offline, though residual risk remains due to its recent activity and infrastructure. Analysis indicates that irysnetwork.com was flagged by 18 of 95 security vendors on VirusTotal, signaling broad recognition of its malicious intent. The domain was registered on January 8, 2026, through NameCheap, Inc., and resolves to the IP address 172.67.214.210, hosted on Cloudflare’s network (AS13335). It appears on one security blocklist and was actively blocked by PhishDestroy. The page title, 'Lighter,' does not correspond to any known legitimate service, and the SSL certificate is issued under the WE1 root, a common indicator of low-trust or ephemeral hosting. The domain’s creation date suggests it was set up with a short operational lifespan, a tactic frequently employed in phishing campaigns to evade detection and takedown efforts. Current infrastructure analysis reveals that while the domain is offline, its registration remains active, and the underlying hosting provider has not been fully decommissioned. Organizations and individuals are advised to implement DNS-based blocking for irysnetwork.com and its associated IP address to prevent accidental access. End-users should verify the legitimacy of any cryptocurrency-related site by cross-referencing official sources and avoiding connections to unfamiliar wallet interfaces. Security teams are encouraged to monitor for related domains registered under the same pattern or registrar, as threat actors often reuse infrastructure. Given the elevated risk level, proactive measures such as browser-based phishing filters and real-time URL scanning are recommended to mitigate exposure.