etherscna[.]io
etherscna.io 网络钓鱼与安全检查
“Instant Cryptocurrency Exchange | Best Rates & Lowest Fees | ChangeNOW”
etherscna.io — 内容不可用 (HTTP 502). 品牌冒充:Binance; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 2/95 (Gridinsoft); URLQuery 1 alert; 1 external blocklist match (CryptoFirewall); PhishDestroy score 71/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain etherscna.io is identified as a brand impersonation phishing site targeting the Binance brand. This site poses a significant threat to users by misleading them into believing it is a legitimate cryptocurrency exchange, potentially resulting in the theft of funds or personal information. The site has been taken offline, but users should remain vigilant to avoid similar scams.
As of the latest analysis, 2 of 95 VirusTotal vendors detected etherscna.io as malicious, including Gridinsoft, which provided a trust score of 0 out of 100. The domain was created on February 21, 2026, and was hosted on the IP address 172.66.171.200, located in the US under AS13335 Cloudflare, Inc. The SSL certificate for the site was issued by server1.bitaffs.com. The site appeared on 2 security blocklists, specifically PhishDestroy and CryptoFirewall, further indicating its malicious nature.
To protect against the risks associated with etherscna.io, users who may have interacted with the site should immediately change their Binance passwords and enable two-factor authentication if not already done. For cryptocurrency users, it is advisable to revoke any token approvals and move funds to a new, secure wallet. Additionally, users should report the phishing activity to Binance and other relevant authorities to help prevent further victimization. Regularly monitoring accounts for any unauthorized activity is also crucial in maintaining security.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | changenow.io/dist/5126.91a7be87cc0d810e2cda.16.3.55.js |
malware | Detects SocGholish obfuscated variant first observed in July 2022 |
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。