eth-wpos[.]xyz

The domain eth-wpos.xyz has been taken offline but remains listed as a malicious resource associated with a crypto‑related scam. Infrastructure analysis shows the domain resolved to the IPv6 address 2a06:98c1:3120::3, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States. Registration data indicates the domain was recorded through the ARIN registry, and only a single nameserver entry is present. No SSL certificate was observed, implying that any HTTPS service would have been self‑signed or absent, which is consistent with the current offline HTTP status.

Reputation services provide a starkly negative profile: Scamadviser assigns a trust score of 1 out of 100, while Gridinsoft reports a score of 0 out of 100. VirusTotal analysis recorded four positive detections out of ninety‑five scanned security vendors, confirming the presence of malicious indicators. The domain is actively listed on three security blocklists and has been specifically blocked by PhishDestroy, ScamSniffer, and Enkrypt, reinforcing the consensus that it is a phishing or scam vector.

The only page metadata available is the title "Beacon," which offers no insight into the content or targeted brand. The listed scam type is "Crypto Scam," indicating that the threat likely attempts to deceive victims into transferring cryptocurrency or revealing wallet credentials. No additional context, such as a targeted brand or phishing kit, is present in the available intelligence.

Defenders should add eth-wpos.xyz to network‑level deny lists, enforce DNS filtering, and monitor for any resurgence of the domain or similar IPv6 addresses within the Cloudflare AS13335 range. Continuous observation of the associated blocklists is recommended, as the domain may be reactivated or duplicated under a new name.