ethereum-arbitrage[.]pro

The domain ethereum-arbitrage.pro is currently flagged as a brand-impersonation site targeting the Ethereum brand. Registration information shows the domain was provisioned through ORANGEHOST, which operates ASN 19853 and hosts the domain on the IP address 173.252.167.130 located in the United States. The authoritative name servers are ns1.orangehost.com and ns2.orangehost.com, confirming the hosting relationship. No TLS certificate is presented, indicating the site was served over plain HTTP only.

The page title returned by the host, “No Coding Arbitrage,” does not reference the Ethereum brand, but the intelligence label identifies the site as a crypto-scam that impersonates Ethereum, suggesting the content was intended to lure users with arbitrage promises. Reputation services assign extremely low confidence scores: Gridinsoft reports a trust score of 0 / 100, and Scamadviser rates the domain at 1 / 100, both indicating a high likelihood of malicious intent. VirusTotal analysis shows that six of ninety-five scanning engines flagged the domain, and the domain appears on a single security blocklist. PhishDestroy has also taken the domain offline, and the current status is listed as “offline,” which aligns with the removal from public access.

Evidence confirms that the domain resolves to an OrangeHost‑owned IP address without encryption, is associated with multiple low‑trust scores, and has been actively blocked by at least two independent anti‑phishing services. The precise nature of the payload or user‑interaction flow remains unknown because the site content has not been captured and no SSL/TLS handshake was observed. Defenders should continue to block the domain at network perimeter devices, add the IP address 173.252.167.130 to deny‑list rules, and monitor for any future re‑registration attempts.