ethereumwallet[.]pro

This domain, ethereumwallet.pro, is identified as a high-risk brand impersonation threat targeting Ethereum users. Analysis indicates the site masquerades as an official Ethereum wallet, specifically promoting a fraudulent iOS crypto wallet for ETH and ERC-20 tokens. The page title, 'Ethereum Wallet - Secure iOS Crypto Wallet for ETH & ERC-20,' directly impersonates legitimate wallet services to deceive users into disclosing credentials or transferring assets. No explicit drainer kit signatures were detected, but the site’s design and messaging align with known phishing tactics used to compromise cryptocurrency holdings. Technical indicators confirm the malicious nature of this domain. VirusTotal reports 16 out of 95 security vendors flagging ethereumwallet.pro as malicious. The domain was registered on October 14, 2025, through Name.com, Inc., and resolves to the IP address 185.158.133.1. Google Safe Browsing classifies the site as phishing, and it appears on at least one security blocklist. Additionally, the domain is referenced in one AlienVault OTX threat intelligence pulse, further corroborating its association with malicious activity. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as phishing sites commonly use valid certificates to appear legitimate. As of the latest assessment, ethereumwallet.pro has been taken offline, reducing immediate exposure to users. However, the infrastructure remains a latent threat, as domains can be reactivated or repurposed. Organizations and individuals are advised to block the domain and its associated IP (185.158.133.1) at the network level. Users who interacted with the site should assume credential compromise and revoke access to any linked wallets or accounts. Continuous monitoring for related domains registered under the same registrar or IP range is recommended to preempt future threats.