ethyupolstaking[.]webflow[.]io

The domain ethyupolstaking.webflow.io was identified as a generic phishing threat, impersonating the legitimate Ethpool Staking platform. This fraudulent site aimed to deceive users into believing they were interacting with a non-custodial staking pool, potentially to harvest credentials or sensitive information. No specific drainer kit was detected in association with this domain.

Technical analysis reveals that the domain currently has a VirusTotal score of 2/95, meaning only two security vendors flagged it as malicious. It appears on a single security blocklist. The domain was registered through MarkMonitor, Inc. on May 08, 2013, and resolves to IP address 198.18.2.116. The SSL certificate is issued by Google Trust Services (WE1). Google Safe Browsing status was not explicitly provided, but the domain is now offline.

The current status of ethyupolstaking.webflow.io is offline, indicating that it has been taken down, likely due to reporting or hosting provider action. Despite being offline, the risk remains that copycat domains may appear. Users are advised to always verify the legitimacy of staking platforms by checking official URLs, avoiding clicking on unsolicited links, and using security tools to block known phishing sites. PhishDestroy recommends staying vigilant and reporting any suspicious domains encountered.