portal-edel[.]xyz

This domain, portal-edel.xyz, is flagged as a generic phishing site impersonating Edel Finance, a cryptocurrency platform. The threat involves a fraudulent voting interface designed to harvest credentials or private keys from users under the pretense of governance participation. No specific drainer kit signatures were identified, but the domain aligns with common phishing tactics targeting decentralized finance (DeFi) communities. Infrastructure analysis reveals the domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on April 26, 2026, and resolves to the IP address 188.114.97.3. VirusTotal reports 3 out of 95 security vendors flagging the domain as malicious. The domain appears on 4 security blocklists, including MetaMask and ScamSniffer, and has a Gridinsoft trust score of 0/100. The page title, 'Voting | Edel Finance,' further confirms the impersonation attempt. The domain is currently offline, likely due to takedown actions or suspension by the registrar. However, residual risk remains as threat actors may re-deploy the phishing infrastructure under a new domain or IP. Users who interacted with the site should revoke any connected wallet permissions, monitor for unauthorized transactions, and verify their systems for malware. Security teams are advised to block the domain, IP, and associated indicators across network defenses.