invest-standart[.]pro

Analysis as of July 23 2026 indicates that the domain invest-standart.pro was registered on 13 November 2024 via the REGRU‑RU registrar. DNS resolution points to the IP address 188.114.97.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The site was served without an SSL/TLS certificate, returning an HTTP response that is currently offline after being taken down by the PhishDestroy takedown service. The page title observed during the brief live window reads “STANDART - Cryptocurrency trading and invest platform,” and the domain explicitly claims to impersonate the Ethereum brand.

No additional page content has been captured, so the exact layout and credential‑collection mechanisms remain unknown. Reputation signals are strongly negative. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on a single security blocklist. VirusTotal records 12 of 95 scanning engines flagging the host as malicious, corroborating the suspicion.

AlienVault OTX lists the domain in one threat‑intel pulse, providing further community‑based evidence of abuse. The registrar information and the use of a single nameserver suggest a low‑cost, fast‑deployment infrastructure typical of opportunistic brand‑impersonation campaigns. Given the convergence of indicators—unauthenticated TLS, Cloudflare hosting, negative trust rating, multiple vendor detections, and explicit reference to Ethereum—defenders should add invest-standart.pro to URL filtering and DNS block lists, monitor for any resurgence of the domain or sibling domains registered through the same registrar, and enforce strict verification of any communications that reference Ethereum investments. Ongoing vigilance is advised, as the threat actor may reuse the same hosting or registration patterns for future campaigns.