xyzverse-claim[.]web[.]app

The domain xyzverse-claim.web.app is a high-risk brand impersonation domain targeting the Ethereum brand. As of the latest analysis, the domain remains active and poses a significant threat to users who may mistake it for an official Ethereum site.

Infrastructure analysis reveals that xyzverse-claim.web.app is registered through Google Firebase and resolves to the IP address 199.36.158.100, which is located in the United States and is part of the AS54113 Fastly, Inc. network. The SSL certificate for the domain is issued by Google Trust Services / WR4, which may lend an air of legitimacy to unsuspecting visitors. The domain has been flagged by 3 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. Additionally, the domain appears on 5 security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. These blocklists are known for identifying and listing malicious domains, further emphasizing the potential threat posed by xyzverse-claim.web.app.

Given the current status of the domain, it is recommended that users exercise extreme caution and avoid interacting with xyzverse-claim.web.app. Network administrators and security teams should consider adding this domain to their blocklists to prevent access within their networks. Regular monitoring of the domain's status and associated IP addresses is also advised to stay informed about any changes or additional malicious activities.