ethereumwo[.]top

This domain is flagged as a high-risk brand impersonation targeting Ethereum. Registered on March 27, 2026, through GoDaddy.com, the domain remains active as of July 12, 2026, and resolves to IP 188.114.97.3, hosted on Cloudflare infrastructure in Canada. The page title, Suspected Misleading Website | Cloudflare, indicates automated content blocking, while HTTP status 403 suggests access restrictions. VirusTotal reports 11 of 91 security vendors flagging the domain, and AlienVault OTX lists it in 8 threat intelligence pulses. The domain appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Google Trust Services. Gridinsoft trust score is 0/100. The exact content of the landing page has not been analyzed, but the combination of low trust score, widespread vendor detection, and blocklisting by crypto-focused services confirms malicious intent. Defenders should block all traffic to this domain and related subdomains, monitor for lookalike registrations under the ethereumwo pattern, and ensure users are warned through email security gateways and DNS filtering.