eth-s[.]store

eth-s.store entered the PhishDestroy evidence set on Jan 2, 2026. Stored content metadata identifies Generic as the apparent target. The stored content classification is crypto scam. The assembled evidence scores 100/100 (critical).

Three independent sources are positive: VirusTotal, URLQuery, and URLScan. VirusTotal recorded 6 detections among 93 engines: ChainPatrol, alphaMountain.ai, CyRadar, Gridinsoft, SOCRadar, Trustwave on May 23, 2026 at 14:10 UTC. URLQuery recorded 100 detections. URLScan returned a malicious verdict with score 100 on Feb 24, 2026 at 01:15 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:14 UTC; content was unavailable. Registration records for the domain list HOSTINGER operations, UAB as the registrar and Dec 30, 2025 as the creation date. Registration preceded first observation by 2 days. At collection time, the hostname resolved to 43.132.149.152 on AS132203 (TENCENT-NET-AP-CN Tencent Building, Kejizhongyi Avenue, CN). The associated network metadata labels the endpoint as AS132203 Tencent Building, Kejizhongyi Avenue in Hong Kong, HK. The stored server header is nginx. DOM analysis completed on Apr 23, 2026 at 19:20 UTC; stored DOM score 10/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Aug 2, 2026 at 04:18 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.

No page title was retained; the visual captures, not a title string, preserve the landing-page appearance. Taken together, the page content and independent findings support classifying this hostname as Generic-themed crypto scam.