dymensiom[.]github[.]io

This domain, dymensiom.github.io, is flagged as a high-risk brand impersonation threat targeting Ethereum users. Analysis indicates the site mimics the official Ethereum platform, presenting itself as 'Dymension™ | Home Official Site' to deceive visitors into interacting with malicious wallet drainer infrastructure. The domain is designed to harvest cryptocurrency wallet credentials and execute unauthorized transactions, a common tactic in cryptocurrency phishing campaigns. Infrastructure analysis reveals the domain resolves to the IPv6 address 2606:50c0:8003::153, hosted on AS54113 (Fastly, Inc.) in the United States. The site is registered through GitHub Pages and secured with a Let's Encrypt SSL certificate (R12). VirusTotal detection shows 1 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The domain is currently active and has not been taken down by the hosting provider or registrar. Current status remains active, posing a continued risk to Ethereum users. Response actions include blocking access via PhishDestroy and monitoring for further abuse. Despite these measures, the domain retains operational infrastructure, and users are advised to avoid interaction. Safety guidance includes verifying official Ethereum domains, using hardware wallets for transactions, and cross-referencing URLs with known blocklists before engaging with cryptocurrency platforms.