Scammers purchase deceptive ENS domains that resemble legitimate ETH addresses by replacing letters with alphanumeric sequences.