dappscoinfix[.]site

On July 22, 2026 analysts documented that the domain dappscoinfix.site is being used to impersonate the Ethereum brand. The domain was created on February 21, 2026 and serves a page whose title is "Dapps Leading Synthetic Protocol", matching the declared crypto‑scam classification. DNS resolution directs traffic to the IP address 174.138.190.170, which belongs to Interserver, Inc. (AS19318) and is geolocated to the United States. The site presents a TLS certificate issued by ZeroSSL ECC Domain Secure Site CA, a publicly available certificate that does not convey any legitimate brand endorsement.

Reputation metrics are extremely low: Gridinsoft assigns a trust score of 0 out of 100, while Scamadviser rates the domain at 34 out of 100, both indicating a high likelihood of malicious activity. The domain is listed on four independent security blocklists and has been flagged by four anti‑phishing services—PhishDestroy, Polkadot, Enkrypt, and Codeesura—demonstrating broad detection across multiple vendors. VirusTotal analysis reports a single positive detection among 93 scanned security vendors, reinforcing the presence of malicious intent even though the detection count is minimal. The site’s current status is offline, suggesting that takedown actions or host suspension may have been applied, yet the underlying IP and hosting infrastructure remain observable.

Defenders should continue to block dappscoinfix.site and its associated IP address at network perimeters, incorporate the identified blocklist entries into URL filtering policies, and monitor for future registrations that reuse the "dappscoinfix" lexical pattern. Because the SSL certificate is generic and the page title provides no additional functional insight, deeper content analysis cannot be performed at this stage. Ongoing surveillance of the hosting provider, ASN, and any related domains is recommended to detect potential re‑deployment of similar impersonation infrastructure.