# Phishing sites impersonating Etherscan PhishDestroy has recorded 35 phishing domains impersonating Etherscan since 2025-08-07, 1 of them in the last 30 days. The most used registrars are PublicDomainRegistry.com and HOSTINGER operations; the most common TLDs are .com and .xyz. Open Etherscan only from its official app or a saved bookmark. 35Domains, all time 1Last 30 days 9Online at last check 1Confirmed takedowns ## New domains in the last 90 days Etherscan phishing domains detected per day: 3 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Etherscan site Words most often added to the brand in reported domains: manyushiba, manyushib, upgrade, arc, migration, claim, manyu, shiba, enroll, proposal. - Type the address yourself or use a bookmark; phishing links for Etherscan arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Etherscan will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Etherscan phishing domains The 35 most recently detected domains impersonating Etherscan Domain | First detected | Status at last check | Registrar | [ethersscan.net](https://phishdestroy.io/domain/ethersscan.net/) | 2026-10-22 | Online | Squarespace Domains | [rh-scan.com](https://phishdestroy.io/domain/rh-scan.com/) | 2026-09-02 | Online | Porkbun | [etherscans.at](https://phishdestroy.io/domain/etherscans.at/) | 2026-08-09 | Online | Hosting concepts / Registrar.eu ( https: | [lootbotclaim.pages.dev](https://phishdestroy.io/domain/lootbotclaim.pages.dev/) | 2026-04-21 | Online | Cloudflare | [quantumexitpro.pages.dev](https://phishdestroy.io/domain/quantumexitpro.pages.dev/) | 2026-04-03 | Online | Cloudflare | [blockscn.app](https://phishdestroy.io/domain/blockscn.app/) | 2026-03-23 | Unknown | NICENIC | [lever-bridge-portal.com](https://phishdestroy.io/domain/lever-bridge-portal.com/) | 2026-03-18 | Unknown | NICENIC | [xaujpywel.com](https://phishdestroy.io/domain/xaujpywel.com/) | 2026-03-17 | Offline | HOSTINGER operations | [manyushiba.me](https://phishdestroy.io/domain/manyushiba.me/) | 2026-02-26 | Offline | — | [leverfi-migration.com](https://phishdestroy.io/domain/leverfi-migration.com/) | 2026-02-26 | Offline | Web Commerce Communications dba WebNic.c | [milestone-manyushiba.com](https://phishdestroy.io/domain/milestone-manyushiba.com/) | 2026-02-26 | Offline | PublicDomainRegistry.com | [distributions-manyushiba.com](https://phishdestroy.io/domain/distributions-manyushiba.com/) | 2026-02-26 | Offline | PublicDomainRegistry.com | [manyushib.pages.dev](https://phishdestroy.io/domain/manyushib.pages.dev/) | 2026-02-26 | Online | Cloudflare | [manyushiba.pro](https://phishdestroy.io/domain/manyushiba.pro/) | 2026-02-26 | Offline | — | [manyushib.app](https://phishdestroy.io/domain/manyushib.app/) | 2026-02-26 | Offline | — | [etherscan.find-assets.com](https://phishdestroy.io/domain/etherscan.find-assets.com/) | 2026-02-26 | Online | Bounce Pass Domains | [prize-manyushiba.com](https://phishdestroy.io/domain/prize-manyushiba.com/) | 2026-02-26 | Offline | PublicDomainRegistry.com | [claim-arc.xyz](https://phishdestroy.io/domain/claim-arc.xyz/) | 2026-02-26 | Offline | OwnRegistrar | [usdt.niuzi.app](https://phishdestroy.io/domain/usdt.niuzi.app/) | 2026-02-03 | Offline | Cloudflare | [etherscanblockchain.io](https://phishdestroy.io/domain/etherscanblockchain.io/) | 2026-01-24 | Offline | HOSTINGER operations | [claim-paal.xyz](https://phishdestroy.io/domain/claim-paal.xyz/) | 2026-01-24 | Unknown | NiceNIC | [ivfun-migration.com](https://phishdestroy.io/domain/ivfun-migration.com/) | 2026-01-06 | Offline | Web Commerce Communications | [jesuscoin-upgrade.xyz](https://phishdestroy.io/domain/jesuscoin-upgrade.xyz/) | 2025-12-24 | Offline | Web Commerce Communications | [batchrevoker.xyz](https://phishdestroy.io/domain/batchrevoker.xyz/) | 2025-12-20 | Offline | HOSTINGER operations | [lwi8u9xmkzd5hhec.vercel.app](https://phishdestroy.io/domain/lwi8u9xmkzd5hhec.vercel.app/) | 2025-11-23 | Online | Vercel | [sendgrid.help](https://phishdestroy.io/domain/sendgrid.help/) | 2025-11-01 | Taken down | Dynadot | [v2-ens.xyz](https://phishdestroy.io/domain/v2-ens.xyz/) | 2025-10-21 | Unknown | NiceNIC | [voting-manyushib.info](https://phishdestroy.io/domain/voting-manyushib.info/) | 2025-10-12 | Offline | Cloudflare | [vote-manyushib.com](https://phishdestroy.io/domain/vote-manyushib.com/) | 2025-10-11 | Unknown | NiceNIC | [proposal-manyushiba.xyz](https://phishdestroy.io/domain/proposal-manyushiba.xyz/) | 2025-10-02 | Unknown | NiceNIC | [enroll-manyushiba.com](https://phishdestroy.io/domain/enroll-manyushiba.com/) | 2025-09-29 | Unknown | NiceNIC | [upgrade-arc.tech](https://phishdestroy.io/domain/upgrade-arc.tech/) | 2025-09-26 | Offline | HOSTINGER operations | [manyushiba.cloud](https://phishdestroy.io/domain/manyushiba.cloud/) | 2025-09-20 | Offline | HOSTINGER operations | [manyu-shiba.com](https://phishdestroy.io/domain/manyu-shiba.com/) | 2025-08-08 | Offline | PublicDomainRegistry.com | [manyushiba.vip](https://phishdestroy.io/domain/manyushiba.vip/) | 2025-08-07 | Offline | PublicDomainRegistry.com | [All 35 Etherscan reports](https://phishdestroy.io/domain/?brand=Etherscan) ## Where they are registered and hosted ### Registrars - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)5 - [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)5 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)5 - Cloudflare5 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)2 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)2 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)1 - Vercel1 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)12 - [.xyz](https://phishdestroy.io/tld/xyz/)6 - [.app](https://phishdestroy.io/tld/app/)4 - [.dev](https://phishdestroy.io/tld/dev/)3 - [.vip](https://phishdestroy.io/tld/vip/)1 - [.cloud](https://phishdestroy.io/tld/cloud/)1 - [.tech](https://phishdestroy.io/tld/tech/)1 - [.info](https://phishdestroy.io/tld/info/)1 ### Hosting networks - CLOUDFLARENET, US20 - Cloudflare, Inc.4 - CLOUDFLARENET - Cloudflare, Inc., US3 - AS-HOSTINGER Hostinger International Limited, CY2 - AMAZON-02, US2 - swissnetwork02 Global-Data System IT Corporation1 - ANSHENG-AS-AP Ansheng Network Technology Co., Li1 - Team Internet AG1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Etherscan; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/etherscan/