roscoe-ethereum[.]ai-cryptolist[.]net

This domain is flagged with an elevated risk level due to its specific threat type: brand impersonation targeting Ethereum. The domain, roscoe-ethereum.ai-cryptolist.net, mimics Ethereum to deceive users, posing a risk of phishing attacks and data theft. Its status is currently offline, but the threat remains due to its history of malicious activity.

The domain was created on April 11, 2026, and has been registered through Key-Systems GmbH. It resolves to the IP address 104.21.68.219 and uses an SSL certificate provided by Google Trust Services. This domain has been flagged by 16 out of 95 security vendors on VirusTotal, indicating a significant detection of malicious activity. It is also listed on one security blocklist, specifically blocked by PhishDestroy, which further confirms its untrustworthy nature.

To mitigate risks associated with this type of threat, users should avoid interacting with any content from this domain and ensure that security software is updated to detect such impersonation attempts. Organizations should educate users about the signs of brand impersonation and regularly update internal blocklists to include domains like roscoe-ethereum.ai-cryptolist.net. Verifying domain authenticity through official channels before engaging with any suspicious Ethereum-related communications is crucial to avoid potential financial loss and data breaches.