evolution-world[.]org

The domain evolution-world.org was registered on April 29, 2023 through NameCheap, Inc. and is currently taken offline. DNS resolution points to the IPv4 address 163.61.188.5, which is advertised as being located in the United States under ASN 153568 (NEW DHAKA HARDWARE). The domain uses four nameservers – dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com and dns4.lytehosting.com – all hosted by LyteHosting. No TLS certificate is presented, indicating that HTTPS is not available for the site.

The page title returned from the site, "Evolution-World – A decentralized Crypto and Forex trade investment and management Platform," suggests an investment‑oriented front‑end that claims to offer crypto and forex services. The intelligence explicitly states that the site impersonates the Ethereum brand, classifying the activity as a brand‑impersonation investment scam. The domain appears on a single security blocklist and has been flagged by PhishDestroy. Independent analysis by Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence in malicious intent.

VirusTotal scanned the domain with 95 antivirus engines and reported no detections; however, the absence of detections does not constitute evidence of benign behavior. Given the combination of a brand‑impersonation claim, a zero trust score, lack of SSL, and blocklist presence, the domain should be treated as malicious. Defensive actions include adding the domain and its resolving IP 163.61.188.5 to network deny lists, monitoring for similarly structured domains registered with the same registrar or nameservers, and ensuring that endpoint protection solutions are configured to flag any attempted connections to this host. Continuous observation of the IP space associated with ASN 153568 is recommended to detect potential re‑use of the infrastructure for future campaigns.