evmport[.]com

This domain, evmport.com, is actively serving a site whose HTML title is “ETHClaims.net”. The domain was registered on 2025-10-11 through Internet Domain Service BS Corp. DNS resolution points to 104.21.1.129, an address owned by Cloudflare (AS13335) located in the United States. The site is protected by a Google Trust Services / WE1 SSL certificate and responds with an HTTP 301 redirect, indicating that the original URL is being forwarded elsewhere. Infrastructure analysis shows the use of Cloudflare’s CDN and HTTP/3, with authoritative nameservers ada.ns.cloudflare.com and chris.ns.cloudflare.com. Reputation services assign extremely low trust scores (Gridinsoft 1/100, Scamadviser 1/100) and the domain appears on a single security blocklist, currently listed by PhishDestroy. VirusTotal records a single positive detection out of 95 scanned engines. The combination of a recent registration, low reputation scores, Cloudflare front-end, and a redirect to a page titled “ETHClaims.net” aligns with the generic_phishing classification. At present no additional payload or content details are publicly available, so the exact phishing vector remains unconfirmed. Defenders should block network traffic to evmport.com, add the domain to URL filtering and email security policies, monitor DNS queries for the associated Cloudflare IP, and continue to watch for any future indicator updates from threat feeds.