# ethscan.app — SUSPICIOUS

> ethscan.app poses as a fake Ethereum blockchain explorer to steal wallet credentials. Flagged by 0/95 VirusTotal scanners but registered through Namecheap.

## Summary
ethscan.app is a phishing domain impersonating the legitimate Ethereum blockchain explorer Etherscan.io. The domain is currently active and under investigation for generic phishing activities, specifically targeting cryptocurrency users by mimicking a trusted platform to harvest wallet credentials and private keys. Users are advised to exercise caution when accessing this domain, as it may lead to financial loss or account compromise.  

This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating a low immediate detection rate despite its suspicious nature. ethscan.app was registered through Namecheap Inc. and resolves to the IP address 104.21.67.99. The domain was created on May 14, 2018, and currently maintains a Google Trust Services SSL certificate, which may lend an air of legitimacy to unsuspecting users. The absence of detections on VirusTotal suggests that traditional security tools have not yet flagged this domain as malicious, posing an elevated risk to users relying on automated threat detection systems.  

Given the active status of ethscan.app and its potential to deceive users into divulging sensitive information, the current recommendation is to avoid interacting with this domain entirely. Users should verify the authenticity of blockchain explorers by cross-referencing URLs with official sources, such as etherscan.io, and ensure they are using bookmarked or directly typed links. If accidental exposure occurs, users should immediately revoke any compromised wallet connections, transfer funds to a secure wallet, and monitor for unauthorized transactions. Security researchers are encouraged to monitor this domain for further malicious activities and report any new intelligence to relevant threat intelligence platforms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2018-05-14 09:16:03
- Registrar: Namecheap Inc.
- IP: 104.21.67.99

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c3cfa59c-c744-42b7-9d13-d0a14440edf0
- PhishDestroy: https://phishdestroy.io/domain/ethscan.app/
- LLM endpoint: https://phishdestroy.io/domain/ethscan.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ethscan.app/
Last updated: 2026-03-23