ethereumeprexxp-com-gen1[.]trackfinanceworld[.]com

The domain ethereumeprexxp-com-gen1.trackfinanceworld.com is actively impersonating Ethereum, a well-known cryptocurrency platform. With a VirusTotal score of 14/95, this domain poses a substantial phishing risk to users looking for Ethereum-related services. It exploits the brand's reputation to deceive users into divulging sensitive information or making fraudulent transactions.

Registered with MainReg Inc., this domain is 390 days old, indicating a potentially persistent threat. The IP address 198.18.0.217 associated with this phishing site is also reported on multiple blocklists, suggesting that it is part of a wider scam infrastructure. Its presence on these lists demonstrates a concerning pattern of malicious activity targeting users of the Ethereum brand.

Currently, the domain is still active, and PhishDestroy is monitoring this threat closely. We have reported the phishing activity and continue to gather intelligence to mitigate its impact on potential victims. Immediate action is recommended for users encountering this domain.