etherscan-cm.github.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of etherscan-cm.github.io
This domain appears to host a page presenting itself as “Etherscan | Block Explorer,” with branding, layout, and text associated with Ethereum blockchain search and analytics services. The screenshot shows blockchain statistics, token and NFT navigation, transaction listings, and a wallet connection prompt, suggesting the page is designed to resemble a cryptocurrency explorer or wallet-adjacent service.
However, the domain itself is not the primary Etherscan domain and instead uses a GitHub Pages subdomain: etherscan-cm.github.io. Based on the naming pattern, the site appears to reference the well-known Etherscan brand while being hosted on a separate user-controlled GitHub Pages address. That combination may indicate an unofficial mirror, a cloned landing page, or a look-alike site rather than an official blockchain explorer property.
Safety Assessment for etherscan-cm.github.io
This website shows multiple risk indicators at the time of this scan. It was flagged by 13 out of 91 security engines, with several classifying it as phishing or malicious. In addition, the domain closely resembles the well-known Etherscan brand while using a different host, which may indicate a look-alike page intended to imitate a legitimate cryptocurrency service. The screenshot and metadata also reinforce that resemblance by using Etherscan branding and blockchain-explorer wording.
Other signals are mixed but do not outweigh the stronger phishing indicators. A malware scan reported no flagged files, although it did attach a generic malicious label to the domain and several internal resources. Major content-malice blocklists shown here were largely clean at the time of the scan, with one generic blacklist listing present, but multi-engine phishing detections are a stronger signal than a clean file scan alone. The domain is old because it sits under the long-established github.io platform, so the age here does not meaningfully reduce the risk of abuse for this specific subpage.
Based on these findings, this website may pose potential risks to visitors, particularly anyone asked to connect a wallet, enter credentials, or interact with cryptocurrency-related prompts.
Technical Description
The site is hosted on GitHub Pages infrastructure and resolves to an IP associated with GitHub, Inc. It presents a valid Let's Encrypt SSL certificate, which means the connection appears encrypted in transit; however, valid HTTPS does not by itself confirm legitimacy. The reported web server is GitHub.com, and the page appears to be a static site using common frontend assets such as Bootstrap and Mobirise-related files.
DNSSEC is unsigned, which is common but means DNS responses do not appear to have DNSSEC validation protection. The most notable technical concern is not the TLS setup but the combination of a user-controlled GitHub Pages subdomain with branding that appears to imitate a well-known cryptocurrency service, alongside substantial phishing detections from security engines.
Share your experience with this website. Was it safe? Did you encounter any issues?