globalearnings-endosement[.]com

Analysis of globalearnings-endosement.com, observed on July 24 2026, indicates that the domain is part of an elevated‑risk crypto‑scam infrastructure targeting the Ethereum brand. The domain was registered on 21 February 2026 and currently resolves to the IPv4 address 199.188.200.17, which is hosted by Namecheap, Inc. (AS22612) in the United States. The SSL certificate presented by the site is issued by Sectigo RSA Domain Validation Secure Server CA, a standard domain‑validated certificate that does not provide any indication of legitimacy. Public reputation services score the domain extremely poorly: Gridinsoft assigns a trust score of 0 out of 100, and Scamadviser reports a score of 1 out of 100.

VirusTotal analysis shows that one of ninety‑five scanning engines flagged the domain, and the site appears on a single security blocklist. PhishDestroy has also listed the domain as blocked. The page title returned by HTTP requests is “Globalearning-Endosement”, which does not correspond to any known Ethereum landing page and suggests a typographic variation intended to lure victims. The domain is presently taken offline, but the historical evidence demonstrates a deliberate attempt to impersonate Ethereum for illicit financial gain.

Uncertainty remains around the exact payload delivered, the presence of any credential‑harvesting form, or additional command‑and‑control infrastructure, as no page content has been captured. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated IP address, and add the domain to internal blacklists. Organizations handling Ethereum‑related assets should increase user awareness of this impersonation technique and apply strict email and web filtering to prevent exposure to similar crypto‑scam domains.