etthereumwaltit[.]webflow[.]io
“Crypto Wallet | Supports Bitcoin (BTC), Bitcoin Cash (BCH), Ethereum”
已存储的观测记录
观测到的标题差异
证据摘要
Analysis of etthereumwaltit.webflow.io, observed on July 23 2026, indicates a high‑risk brand‑impersonation campaign targeting the Ethereum brand. The domain, registered through MarkMonitor, Inc. on 08 May 2013, resolves to the Cloudflare‑owned address 172.64.151.8 (AS13335, United States). The site presents a TLS certificate issued by Google Trust Services under the WE1 identifier, confirming the use of legitimate‑looking HTTPS. HTTP probing returned a 404 status, and the page title retrieved reads “Crypto Wallet | Supports Bitcoin (BTC), Bitcoin Cash (BCH), Ethereum,” matching the declared scam type of a Crypto Scam and confirming the impersonation of Ethereum.
Reputation services rate the domain extremely poorly: Gridinsoft assigns a trust score of 1 / 100, Scamadviser also records 1 / 100, and VirusTotal reports 15 of 95 scanning engines flagging the host. The domain appears on a single security blocklist and is listed by PhishDestroy as taken offline. Google Safe Browsing classifies the URL under social‑engineering threats. Infrastructure fingerprints show Cloudflare as the DNS provider, with nameservers journey.ns.cloudflare.com and lamar.ns.cloudflare.com, and the site supports HTTP/3.
Given the observed indicators, defenders should immediately block the domain and its resolving IP at network perimeters, update detection signatures to include the observed TLS fingerprint and page title, and monitor for newly‑registered domains using the same registrar or similar naming patterns. Continuous re‑scanning is advised, as the current offline status may change. The evidence presented suffices to classify the domain as a confirmed malicious impersonation of the Ethereum brand.
Data Coverage
安全信号
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月11日
检测时间线
-
域名状态
可访问 → 无法访问
-
Cloudflare Radar
已存储 Cloudflare Radar 扫描 · 打开扫描
技术
识别出 2 项高置信度技术
VirusTotal 分析
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控