velodromefl[.]xyz

The domain velodromefl.xyz is assessed as a high-risk generic phishing threat. Analysis indicates that this domain was likely used to impersonate Velodrome Finance, a legitimate financial service, to deceive users and steal sensitive information such as login credentials and personal data.

This domain is flagged by 19 out of 95 security vendors on VirusTotal, indicating a notable level of suspicion. It was registered through NiceNIC International Group Co., Limited and resolves to the IP address 172.67.210.128, which is located in the United States and is part of AS13335 Cloudflare, Inc. The domain was created on February 21, 2026, and currently appears on three security blocklists. The SSL certificate is issued by Google Trust Services / WE1, which may have been used to lend an air of legitimacy to the phishing site. The domain is currently offline and is blocked by PhishDestroy, MetaMask, and SEAL.

To mitigate the risks associated with this domain, users are advised to avoid clicking on any links or entering personal information on websites that appear similar to Velodrome Finance. Network administrators should consider adding this domain to their DNS blocklists to prevent access. Additionally, end-users should be educated on recognizing phishing attempts and verifying the legitimacy of financial service websites through official channels and trusted security tools.