web3-ethereum[.]cc

Analysis of web3-ethereum.cc indicates a high‑risk brand‑impersonation operation targeting the Ethereum ecosystem. The domain was registered on 21 February 2026 through Gname.com Pte. Ltd. and uses the authoritative name servers a4.share-dns.com and b4.share-dns.net. DNS resolution points to the IPv4 address 154.88.15.81, which belongs to ASN 40065 (CNSERVERS LLC) and is geolocated in Hong Kong. An HTTP request returns the title “404 Not Found”, suggesting that the site is currently not serving a functional page; the SSL certificate status could not be retrieved, and no HTTPS handshake data are available.

Threat intelligence flags the domain as a crypto‑scam employing an “Airdrop Scam” kit and explicitly impersonates the Ethereum brand. VirusTotal recorded 13 positive detections out of 93 scanned engines, and the domain is listed on four external blocklists. Defensive products PhishDestroy, MetaMask, ScamSniffer, and SEAL have already blocked the host. The Gridinsoft trust score of 0 / 100 further corroborates the malicious assessment.

Given the observed infrastructure, the domain should be treated as malicious. Defenders are advised to add 154.88.15.81 to network‑level blocklists, enforce DNS sinkholing for web3-ethereum.cc, and monitor for any re‑hosting attempts that might reuse the same registrar or name‑server pattern. Continued observation of the registrar Gname.com Pte. Ltd. for new registrations resembling the current naming scheme is recommended. Until the site is taken permanently offline, any traffic to the domain must be denied to prevent potential credential harvesting or token theft.