etharscen[.]io

The domain etharscen.io is flagged for brand impersonation of Ethereum, as indicated by its page title "Ethereum (ETH) Blockchain Explorer" and the explicit classification of a crypto scam. Registration data shows the domain was created on February 5, 2025 through Gname.com Pte. Ltd., and it is served by the nameservers a.share-dns.com and b.share-dns.net. DNS resolution points to IP address 167.86.90.120, an address located in France and assigned to ASN 51167, Contabo GmbH, a hosting provider frequently associated with malicious infrastructure. No TLS certificate is presented for the site, meaning traffic is unencrypted and susceptible to interception.

VirusTotal scans have recorded detections by 12 of 95 security vendors, reinforcing the malicious assessment. The domain appears on at least one public blocklist and is specifically listed by PhishDestroy, confirming its inclusion in threat intelligence feeds. Scamadviser attributes a trust score of 35 out of 100, reflecting a low reputation. Current operational status is offline, but the historical evidence suggests a concerted effort to mimic the official Ethereum explorer service to lure cryptocurrency users.

Uncertainties remain regarding the exact payload or credential‑stealing mechanisms that may have been hosted while the site was live, as no page content beyond the title is available. Defenders should block etharscen.io at network perimeters, update firewall and DNS filtering policies, and monitor for any resurgence or related domains using similar naming patterns. Incident response teams should also advise users to verify URLs against official Ethereum resources and to avoid entering private keys or account information on untrusted sites.