deadalus[.]io

The domain deadalus.io is a confirmed phishing site engaged in brand impersonation targeting users of the Celer platform. It presents itself as a legitimate cryptocurrency wallet under the name 'Deadalus Wallet' but is designed to harvest seed phrases through seed-phishing tactics. As of the latest verification, deadalus.io has been taken offline, though it previously posed an elevated risk to visitors.

Technical analysis shows deadalus.io was registered through NameCheap, Inc. on October 23, 2025, and resolved to the IP address 199.188.200.56, hosted on AS22612 (Namecheap, Inc.) in the US. The domain was flagged by 2 of 95 VirusTotal security vendors, including Bfore.Ai PreCrime and SOCRadar, and appeared on 1 security blocklist (PhishDestroy). No SSL certificate was present, and the observed page title was 'Deadalus Wallet | Open-Source ADA Wallet with Full Control'. The site returned an HTTP 429 status code at the time of assessment, and Gridinsoft assigned it a trust score of 0/100.

Individuals who interacted with deadalus.io should immediately revoke any token approvals and transfer funds to a new, secure wallet to prevent unauthorized access. If seed phrases or private keys were entered, consider the compromised wallet permanently at risk. Victims should also change passwords for any accounts linked to the phishing site, enable two-factor authentication, and monitor for fraudulent transactions. To report the incident, submit the domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s security team (Celer) for further investigation.