ethereal-trade[.]com

ethereal-trade.com was registered on April 02, 2025 via HOSTINGER operations, UAB and resolves to 2.57.91.92. PhishDestroy has flagged this domain as an active crypto drainer site designed to trick users into connecting crypto wallets under the false pretense of a trading platform. Once connected, the site attempts to drain cryptocurrency assets directly from the wallet using unauthorized transaction requests. This behavior is consistent with modern crypto drainer toolkits that exploit user trust during supposed onboarding or trading activities. This domain was flagged by only 1 out of 95 VirusTotal security vendors at the time of detection, indicating low initial detection coverage despite clear malicious intent. The domain’s recent creation—just days ago—and use of a legitimate-looking registrar (HOSTINGER operations, UAB) suggest an opportunistic campaign targeting early adopters of new services. The IP address 2.57.91.92 has been associated with multiple low-reputation domains in the past, reinforcing the likelihood of coordinated malicious infrastructure. If you visited ethereal-trade.com, disconnect your wallet immediately and revoke any unauthorized permissions through your wallet’s interface or a trusted revocation tool like revoke.cash. Do not approve any pending transactions that you did not initiate. Scan your device for malware using a reputable antivirus tool, as crypto drainers often come bundled with stealthy infostealers. Report the domain to your organization’s SOC or to abuse channels at HOSTINGER operations to help block further access. Remain vigilant for unusual activity in your crypto wallets and consider rotating wallet addresses if you suspect compromise.