kelpdao[.]com-connect-wailet-v5-app[.]com

This domain, kelpdao.com-connect-wailet-v5-app.com, was observed hosting a generic phishing payload and is currently offline. The site returned the HTTP page title “Access Denied”, indicating that the content is no longer publicly reachable. DNS resolution points to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain was created on 21 February 2026 and has been listed on one security blocklist.

VirusTotal scanned the domain and four of ninety‑three antivirus or URL‑reputation engines reported it as malicious. The SSL certificate presented is identified as “WE1”, and the site was explicitly blocked by the PhishDestroy service. Independent reputation scoring from Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the malicious classification. The combination of recent registration, low trust score, multiple vendor detections, and blocklist presence suggests an active phishing infrastructure that was taken down shortly after deployment.

Defenders should continue to block the domain at perimeter filters, monitor the associated IP address for any resurgence of malicious activity, and add the domain to internal blacklists. Because the hosting provider is Cloudflare, any future re‑use of the same IP range may warrant additional scrutiny. Ongoing threat‑intel feeds should be consulted for potential re‑registration attempts or related domains that share the same registration pattern or certificate fingerprint.