ethereum-status[.]pages[.]dev

This domain, ethereum-status.pages.dev, is flagged as a high-risk brand impersonation threat targeting Ethereum users. Analysis indicates the infrastructure is designed to mimic legitimate Ethereum status or wallet verification pages, likely to harvest credentials or private keys. The domain exhibits characteristics consistent with phishing campaigns, including the use of a deceptive page title, "Ethereum Status," and hosting on a content delivery network to obscure its origin. Infrastructure analysis reveals the following technical indicators: the domain was registered on February 27, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, associated with AS13335 (Cloudflare, Inc.) in the United States. The SSL certificate is issued by Google Trust Services (WE1). As of the latest scan, the domain is detected by 3 out of 95 security vendors on VirusTotal and appears on three independent security blocklists. No listings were identified in Google Safe Browsing at the time of analysis. The domain remains active, posing an ongoing risk to users who may mistake it for a legitimate Ethereum service. Response actions by security providers include blocking access via multiple threat intelligence feeds. Despite these measures, the infrastructure continues to resolve, and users are advised to avoid interaction with the domain. Organizations should update blocklists to include this domain and monitor for related indicators of compromise, such as the associated IP address and SSL certificate issuer.