ethereudwallet[.]webflow[.]io

Analysis of ethereudwallet.webflow.io indicates a confirmed crypto scam infrastructure targeting Ethereum users, currently offline as of July 25, 2026. The domain, hosted on Webflow's platform, resolved to 172.64.151.8 (US, AS13335 Cloudflare, Inc.) and was served via Cloudflare with HTTP/3 support. SSL certification was provided by Google Trust Services, though this does not validate legitimacy. At the time of assessment, the domain returned an HTTP 404 status with the page title '404 - Page not found,' suggesting either takedown or temporary concealment of malicious content.

No nameservers were detected, which may reflect an incomplete or disrupted hosting configuration. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, reinforcing its classification as malicious. Three of 94 security vendors on VirusTotal flagged the domain, though the absence of broader detection does not imply safety. The scam type is explicitly categorized as a crypto scam, consistent with Ethereum brand impersonation.

Defenders should treat this domain as compromised infrastructure, particularly given its prior association with active phishing operations. While the current 404 status may indicate a takedown, historical resolutions and blocklist persistence warrant continued monitoring. Network-level blocking of the resolved IP (172.64.151.8) and associated Cloudflare ranges is recommended for organizations handling cryptocurrency transactions. No additional page content or phishing kit details were available for analysis.