etheerscan[.]io

The domain etheerscan.io was registered on February 21, 2026 and is presently taken offline. Technical analysis shows it was configured to resolve to the IP address 104.20.30.56, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The TLS certificate presented by the host is issued to server1.bitaffs.com, a name that does not correspond to the alleged service and further indicates a mismatch between the advertised brand and the underlying infrastructure. The page title returned by the site, "Instant Cryptocurrency Exchange | Best Rates & Lowest Fees | ChangeNOW," references a legitimate exchange service unrelated to the targeted brand, Binance, confirming that the domain was intended to masquerade as a Binance‑related resource.

Gridinsoft assigned a trust score of 0 out of 100, and the site was flagged by two independent blocklists. VirusTotal recorded a single positive detection out of 93 scanned security vendors, demonstrating that at least one scanner identified malicious behavior. The domain has been listed by both PhishDestroy and CryptoFirewall as a crypto‑scam vector, and its classification is recorded as a Crypto Scam.

While the site is no longer reachable, the evidence suggests a deliberate brand‑impersonation campaign designed to lure users seeking Binance services. Defenders should continue to block the domain at the DNS and proxy layers, monitor the associated IP range for any re‑use, and ensure that endpoint security solutions are updated to reflect the observed indicators, including the mismatched TLS certificate and the specific page title. Ongoing intelligence collection is advised to detect any future re‑deployment of the same infrastructure under a different domain name.