eth-cow[.]click

The domain eth-cow.click was registered on June 08, 2026 through Dynadot, LLC and currently resolves to the IPv4 address 130.12.180.128. VirusTotal analysis shows that six of ninety‑one scanned security vendors flagged the domain, indicating a moderate level of detection across multiple AV engines. The domain is listed on three independent security blocklists and has been explicitly blocked by the PhishDestroy, MetaMask, and SEAL blocklist providers, confirming its recognition as malicious by reputable community feeds.

The threat is classified as generic phishing with an elevated risk rating and remains active as of the report date, July 29, 2026. No public information is available regarding SSL certificate details, HTTP response codes, or page content such as titles or brand references, so the precise visual or functional characteristics of the site cannot be confirmed at this time. Defenders should treat any traffic to eth-cow.click as hostile: block the domain at perimeter firewalls, proxy filters, and DNS resolvers; add the associated IP address 130.12.180.128 to network‑level deny lists; monitor for outbound connections to that address and for any authentication attempts that may be directed to the domain.

Continuous threat‑intel feeds should be consulted for updates, and any detection alerts triggered by the six VirusTotal‑identified vendors should be investigated for potential compromise indicators. Organizations employing security‑aware browsing controls should ensure that the domain is included in web‑filter blocklists to prevent end‑user exposure.