Phishing sites impersonating Etherscan

PhishDestroy has recorded 35 phishing domains impersonating Etherscan since 2025-08-07, 1 of them in the last 30 days. The most used registrars are PublicDomainRegistry.com and HOSTINGER operations; the most common TLDs are .com and .xyz. Open Etherscan only from its official app or a saved bookmark.

35
Domains, all time
1
Last 30 days
9
Online at last check
1
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 12026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 12026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 1
Etherscan phishing domains detected per day: 3 from 2026-07-25 to 2026-10-22; peak 1.

How to tell a fake Etherscan site

Words most often added to the brand in reported domains: manyushiba, manyushib, upgrade, arc, migration, claim, manyu, shiba, enroll, proposal.

  • Type the address yourself or use a bookmark; phishing links for Etherscan arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Etherscan will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Etherscan phishing domains

The 35 most recently detected domains impersonating Etherscan
DomainFirst detectedStatus at last checkRegistrar
ethersscan.net2026-10-22OnlineSquarespace Domains
rh-scan.com2026-09-02OnlinePorkbun
etherscans.at2026-08-09OnlineHosting concepts / Registrar.eu ( https:
lootbotclaim.pages.dev2026-04-21OnlineCloudflare
quantumexitpro.pages.dev2026-04-03OnlineCloudflare
blockscn.app2026-03-23UnknownNICENIC
lever-bridge-portal.com2026-03-18UnknownNICENIC
xaujpywel.com2026-03-17OfflineHOSTINGER operations
manyushiba.me2026-02-26Offline—
leverfi-migration.com2026-02-26OfflineWeb Commerce Communications dba WebNic.c
milestone-manyushiba.com2026-02-26OfflinePublicDomainRegistry.com
distributions-manyushiba.com2026-02-26OfflinePublicDomainRegistry.com
manyushib.pages.dev2026-02-26OnlineCloudflare
manyushiba.pro2026-02-26Offline—
manyushib.app2026-02-26Offline—
etherscan.find-assets.com2026-02-26OnlineBounce Pass Domains
prize-manyushiba.com2026-02-26OfflinePublicDomainRegistry.com
claim-arc.xyz2026-02-26OfflineOwnRegistrar
usdt.niuzi.app2026-02-03OfflineCloudflare
etherscanblockchain.io2026-01-24OfflineHOSTINGER operations
claim-paal.xyz2026-01-24UnknownNiceNIC
ivfun-migration.com2026-01-06OfflineWeb Commerce Communications
jesuscoin-upgrade.xyz2025-12-24OfflineWeb Commerce Communications
batchrevoker.xyz2025-12-20OfflineHOSTINGER operations
lwi8u9xmkzd5hhec.vercel.app2025-11-23OnlineVercel
sendgrid.help2025-11-01Taken downDynadot
v2-ens.xyz2025-10-21UnknownNiceNIC
voting-manyushib.info2025-10-12OfflineCloudflare
vote-manyushib.com2025-10-11UnknownNiceNIC
proposal-manyushiba.xyz2025-10-02UnknownNiceNIC
enroll-manyushiba.com2025-09-29UnknownNiceNIC
upgrade-arc.tech2025-09-26OfflineHOSTINGER operations
manyushiba.cloud2025-09-20OfflineHOSTINGER operations
manyu-shiba.com2025-08-08OfflinePublicDomainRegistry.com
manyushiba.vip2025-08-07OfflinePublicDomainRegistry.com

All 35 Etherscan reports

Where they are registered and hosted

Registrars

  1. PublicDomainRegistry.com5
  2. HOSTINGER operations5
  3. NiceNIC5
  4. Cloudflare5
  5. Web Commerce Communications2
  6. NICENIC2
  7. Dynadot1
  8. Vercel1

Top-level domains

  1. .com12
  2. .xyz6
  3. .app4
  4. .dev3
  5. .vip1
  6. .cloud1
  7. .tech1
  8. .info1

Hosting networks

  1. CLOUDFLARENET, US20
  2. Cloudflare, Inc.4
  3. CLOUDFLARENET - Cloudflare, Inc., US3
  4. AS-HOSTINGER Hostinger International Limited, CY2
  5. AMAZON-02, US2
  6. swissnetwork02 Global-Data System IT Corporation1
  7. ANSHENG-AS-AP Ansheng Network Technology Co., Li1
  8. Team Internet AG1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Etherscan; share of all PhishDestroy reports: 0.02%.