culture-nft[.]pages[.]dev

The domain culture-nft.pages.dev was registered on March 31, 2026 through Cloudflare, Inc. and resolves to the IP address 188.114.97.3, which belongs to Cloudflare's network in Canada. DNS resolution is served by the authoritative nameservers lady.ns.cloudflare.com and lochlan.ns.cloudflare.com. The site presents the page title "CULTURE - Ethereum Culture" and is classified as a brand impersonation campaign targeting the Ethereum brand. The web server enforces HTTP Strict Transport Security, utilizes the cdnjs library, and supports HTTP/3, indicating a modern delivery stack. TLS is provided by Google Trust Services under the WE1 certificate, confirming a valid HTTPS endpoint. Security assessments show a Gridinsoft trust score of 0 out of 100 and the domain is listed on at least one active blocklist, with PhishDestroy already marking it as blocked. No detections were reported by VirusTotal, but this absence does not imply safety. The domain remains active as of the report date, and its risk status is under investigation. Defenders should consider immediate network-level blocking of the domain and its associated IP, monitor DNS queries for the listed Cloudflare nameservers, and add the domain to internal phishing and brand‑impersonation watchlists. Ongoing observation is recommended to detect any changes in hosting, content, or additional malicious activity.