weracas[.]com

The domain weracas.com is a phishing site engaged in brand impersonation, specifically targeting Ethereum users. It presents itself as a legitimate platform but is designed to deceive victims into disclosing sensitive information or transferring assets under false pretenses. As of the latest verification, weracas.com has been taken offline, though it previously posed an elevated risk due to its fraudulent activity.

Technical indicators confirm the malicious nature of weracas.com. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Forcepoint ThreatSeeker, and appears on 1 security blocklist (PhishDestroy). Registered through Web Commerce Communications Limited on August 19, 2025, it resolved to the IP address 57.129.97.29, hosted by OVH SAS in Germany. No SSL certificate was present, and the observed page title was 'WERACAS | Enter the world of sport and stakes!'. The domain used Cloudflare nameservers (carter.ns.cloudflare.com and dana.ns.cloudflare.com), and Gridinsoft assigned it a trust score of 1 out of 100.

Individuals who interacted with weracas.com should take immediate safety steps. If cryptocurrency transactions or wallet connections were attempted, revoke all token approvals and transfer funds to a new, secure wallet. For credential phishing, change passwords on all affected accounts, enable two-factor authentication, and monitor for unauthorized activity. Report the domain to relevant platforms, such as Google Safe Browsing, anti-phishing initiatives, or the impersonated brand (Ethereum) to aid in broader mitigation efforts.