ethereum-lispro[.]com

The domain ethereum-lispro.com was registered on April 08, 2025 through MainReg INC. and resolves to the IPv4 address 212.92.105.101, which is announced by AS43350 NForce Entertainment B.V. in the Netherlands. The authoritative nameservers are nelci.ns.cloudflare.com and nick.ns.cloudflare.com, indicating the use of Cloudflare DNS. No TLS certificate is presented for the host, meaning the site operated only over HTTP before being taken offline.

The page title returned from the now‑inactive site reads "Ethereum Lispro 5.0 - Latest 1X Official Website | Powered by Ethereum Lispro 500", explicitly referencing the Ethereum brand and suggesting a product‑style offering, consistent with the listed scam type of a crypto scam. Reputation services assign extremely low scores: Gridinsoft reports a trust score of 0 / 100, Scamadviser a score of 1 / 100, and the domain appears on a single security blocklist. VirusTotal analysis shows that 17 of 95 scanning engines flagged the domain, reinforcing the malicious assessment. AlienVault OTX has included the domain in two separate threat‑intel pulses, providing additional community corroboration.

The domain has been blocked by PhishDestroy and is currently offline, which limits immediate exposure but does not remove the underlying infrastructure. Defenders should add 212.92.105.101 to network‑level blocklists, monitor for any future DNS records pointing to the same IP or Cloudflare nameservers, and enforce strict outbound filtering for HTTP requests to unknown crypto‑related domains. Continuous threat‑intel feeds should be consulted for re‑registration attempts, and any user‑reported phishing attempts referencing "Ethereum Lispro" should be escalated to incident response teams for containment.