ethereum-genesis[.]org

The domain ethereum-genesis.org was registered on February 2, 2026 through Cloudflare, Inc. and is hosted on Cloudflare’s network (AS13335, United States) with the IP address 104.21.41.132. The domain resolves to Cloudflare nameservers hope.ns.cloudflare.com and todd.ns.cloudflare.com, uses an SSL certificate issued by Google Trust Services / WE1, and returns an HTTP 403 status code, indicating that the site is currently inaccessible. The page title observed before takedown was "Ethereum Events," which does not directly reference the targeted brand. Google Safe Browsing classifies the domain as a social engineering threat, and it is listed on three independent security blocklists.

Multiple anti‑phishing services—including PhishDestroy, MetaMask, and SEAL—have flagged it, and VirusTotal reports 14 of 95 scanned security vendors labeling the site as malicious. The Gridinsoft trust score is 0 out of 100, reinforcing the low trust assessment. The intelligence attributes the scam type to wallet/seed phishing and notes that the domain impersonates Coinbase, a high‑value cryptocurrency brand. Current status is offline, and the site has been taken down.

Defenders should immediately block resolution of ethereum-genesis.org at the network perimeter, add the domain to internal URL filtering and threat intelligence feeds, and monitor for newly registered domains that share similar lexical patterns or use the same Cloudflare nameservers. Continuous verification of DNS changes is advised, as threat actors frequently rotate IPs while retaining Cloudflare infrastructure. Because the site is no longer serving content, any residual risk pertains to prior exposure; however, the presence of a valid Google‑issued SSL certificate and Cloudflare hosting suggests the operators leveraged reputable services to increase credibility.