ethereumlispro[.]net

The domain ethereumlispro.net is identified as a high-risk brand impersonation threat specifically targeting Ethereum, a major cryptocurrency platform. Analysis confirms the domain was actively impersonating Ethereum’s official branding, presenting itself as an authorized platform for Ethereum upgrades or services. The domain is currently offline, though prior activity and infrastructure remain documented for investigative purposes. Infrastructure analysis reveals the domain was created on February 21, 2026, through registrar MainReg Inc. It resolved to the IP address 212.92.105.101 and was secured with a Let’s Encrypt SSL certificate (serial number E8). The domain appears on three security blocklists and is referenced in two AlienVault OTX threat intelligence pulses. VirusTotal detection metrics indicate that 22 out of 95 security vendors flagged ethereumlispro.net as malicious. The page title, 'Ethereum Lispro 2000 & Ethereum 2.0 Lispro (24) version | Official Website,' further supports the conclusion of deliberate brand impersonation. Current status confirms the domain has been taken offline, though residual risk may persist through cached content or secondary distribution channels. Users and organizations are advised to block the domain and associated IP address at the network level. Cryptocurrency holders should verify all communications and platform interactions through Ethereum’s official channels only. Security teams are encouraged to monitor for related infrastructure, including domains registered through MainReg Inc. or resolving to the same IP range, as these may indicate further impersonation attempts.