ethereum[.]gd

The domain ethereum.gd was identified as a brand impersonation threat targeting Ethereum, the well-known cryptocurrency platform. The page title "ethereum.gd | fruits" suggests an attempt to deceive users into believing they are interacting with legitimate Ethereum services, potentially leading to credential theft or crypto drainer activity. This domain was registered through Key Systems GmbH on July 13, 2020, and resolves to the IP address 34.107.155.91, with an SSL certificate issued by ZeroSSL ECC Domain Secure Site CA. Security analysis reveals that 7 out of 95 security vendors on VirusTotal flagged this domain as malicious, and it appears on 3 security blocklists, indicating a moderate but significant risk. The domain is currently offline, meaning it has been taken down or deactivated, likely due to intervention by hosting providers or registrars. However, the threat remains relevant as similar domains may be used in future campaigns. Users are advised to avoid interacting with any unsolicited communications claiming to be from Ethereum and to always verify URLs through trusted sources like PhishDestroy. If any credentials were entered on this domain, they should be changed immediately and accounts monitored for unauthorized activity.