etherscan-dex[.]net

Analysis as of July 24 2026 indicates that etherscan-dex.net was registered on February 21 2026 and presently resolves to the Cloudflare‑owned address 172.67.195.41, which is geolocated to Canada. The domain has been taken offline and is listed on a single security blocklist, where it was identified and blocked by the PhishDestroy service. VirusTotal records show that the domain was scanned by 95 antivirus and URL‑reputation engines; at the time of scanning no engine reported a detection, but the absence of a finding does not constitute evidence of legitimacy.

The only publicly disclosed attribute is the scam classification “Crypto Scam,” suggesting that the site was designed to target cryptocurrency users, likely by impersonating services related to Ethereum blockchain explorers. No additional data such as Safe Browsing status, Open Threat Exchange entries, registrar information, SSL certificate details, HTTP response codes, or page title have been released, leaving the content of the site unverified. Because the infrastructure relies on Cloudflare’s network, the IP address may be shared with unrelated legitimate services, which complicates direct blocking of the host without collateral impact.

Defenders should therefore enforce domain‑level controls: add etherscan-dex.net to DNS‑based blocklists, monitor outbound connections to 172.67.195.41, and watch for newly created domains that resolve to the same Cloudflare IP range. Continued observation of related Cloudflare‑hosted assets is recommended, as threat actors frequently rotate sub‑domains while retaining the same hosting provider. The current risk level remains under investigation pending further evidence.