signup-megaeth[.]com

Analysis of signup-megaeth.com indicates that the domain was registered on February 21, 2026 through Dynadot LLC and is currently taken offline, returning an HTTP 404 status. The domain resolves to the IPv6 address 2606:4700:3036::6815:d6, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS resolution is handled by Cloudflare nameservers (seamus.ns.cloudflare.com and sofia.ns.cloudflare.com), and the site was served over HTTP/3 with an SSL certificate issued by Google Trust Services under the WE1 certificate profile, confirming the use of a valid TLS chain. The page title reported by passive scanners reads "MegaETH | The First Real-Time Blockchain," indicating the domain attempts to masquerade as a legitimate blockchain project and aligns with the classified threat type of a crypto‑focused generic phishing scam.

Security telemetry shows the domain is listed on one external blocklist and has been blocked by the PhishDestroy feed. VirusTotal scans returned two positive detections out of ninety‑five vendors, providing additional corroboration of malicious intent. No additional evidence such as Safe Browsing or OTX identifiers is available.

Defenders should prioritize adding signup-megaeth.com to URL filtering and DNS sinkhole rules, enforce blocking of its associated Cloudflare IPv6 address, and monitor for any resurgence of the domain or related subdomains. Given the use of reputable infrastructure (Cloudflare and Google‑issued TLS), threat actors may attempt to re‑host the payload elsewhere; continuous threat‑intel monitoring of the registrar Dynadot and the observed IP range is recommended. Network egress controls should inspect outbound traffic for connections to the listed IPv6 address, and endpoint protection solutions should be updated with the observed VirusTotal signatures to improve detection of any residual artifacts.