loopscaling[.]com

The domain loopscaling.com has been identified as a potential threat due to its involvement in brand impersonation targeting Ethereum. The site presented itself under the guise of 'Loopscale — Modular Order Book Infrastructure', potentially misleading users into believing it was associated with Ethereum's legitimate services. Although no specific drainer kit has been identified, the deceptive page title suggests attempts to lure users into fraudulent activities.

Technical analysis of loopscaling.com reveals several indicators of malicious intent. The domain has a VirusTotal detection score of 6 out of 95, indicating that multiple security vendors have flagged it as suspicious. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain was created on April 17, 2026. It resolves to IP address 188.114.96.3 and has been included on at least one security blocklist. The site utilizes technologies such as Google Web Server, HSTS, and HTTP/3, which are typically employed to enhance security but may also be misused for phishing purposes.

Currently, loopscaling.com has been taken offline and is blocked by PhishDestroy, reducing immediate risk to users. However, the elevated risk level suggests that vigilance is necessary, as similar domains may emerge to continue targeting Ethereum. Users are advised to exercise caution and verify the authenticity of websites claiming association with Ethereum, particularly those with low trust scores and abnormal registration details. Continuous monitoring and reporting of suspicious domains remain crucial in mitigating phishing threats.