ether.fi

Crypto & web3 Cayman Islandsether.fiEthereum restaking
Cert findings · 24 h
4
Cert findings · 7 days
43
42 reported or listed · 1 on Spamhaus DROP
Registered lookalikes
20
9 listed by a source or an address list
Official domains
2
verified from ether.fi's own sites and records

Certificate findings for ether.fi

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to ether.fi's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 53 findings, grouped by hostname

  1. ethfi-s5-allocations.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ethfi-s5-allocations.xyz
    First seen
    2026-11-05 09:21 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 08:18 UTC to 2027-02-03 08:18 UTC
    Logged 2026-11-05 09:17 UTC in Google PlumbersArms2027h1, entry 623,639,750
    SHA-256 6651cf71f20c926f07152f4efe88e1b0fcdbd240db2b50ec529de318dab55564
    Public key SHA-256 33496a7bdc732e844f216f6327a66bfd05db26463a5db3ef3ce0dbb7ff41f1e3
    Brand
    ether.fi
    Addresses
    104.21.0.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:ba28
    2606:4700:3037::6815:99
    Cloudflare
    Cloudflare (104.21.0.153, 172.67.186.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ethfi-s5-allocations.xyz
    Registered
    2026-05-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:21 UTC

    Suggest a correction

  2. ethfi-s5-distribution.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ethfi-s5-distribution.xyz
    First seen
    2026-11-05 01:51 UTC
    First published
    2026-11-05 02:59 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 03:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 00:50 UTC to 2027-02-03 00:50 UTC
    Logged 2026-11-05 01:49 UTC in Google ParcelYard2027h1, entry 618,055,929
    SHA-256 20845e8913d523efba3bb513ec99f914ef25096b714dbf01de448f9d044ee4fc
    Public key SHA-256 4f51747bf9000ed2298314c2996bc0228d7b41adc6097bb54847d8f3d8cd7c73
    Brand
    ether.fi
    Addresses
    104.21.63.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:ac5e
    2606:4700:3033::6815:3fe5
    Cloudflare
    Cloudflare (104.21.63.229, 172.67.172.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ethfi-s5-distribution.xyz
    Registered
    2026-05-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:54 UTC

    Suggest a correction

  3. etherfi-reallocation.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    etherfi-reallocation.xyz
    First seen
    2026-11-04 23:42 UTC
    First published
    2026-11-05 00:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:49 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-04 00:00 UTC to 2027-02-02 06:03 UTC
    Logged 2026-11-04 23:36 UTC in Let's Encrypt Sycamore2027h1, entry 949,343,057
    SHA-256 3e6b354a24b7a001b1b9a0b2f0c178800328b68adbbf8bb465522e1bbbfa4563
    Public key SHA-256 05d20e88d316739ecae60257fc3d4434da39126a096bcafb563f4b5717fa881a
    Brand
    ether.fi
    Addresses
    104.21.78.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:4e8d
    2606:4700:3036::ac43:de6e
    Cloudflare
    Cloudflare (104.21.78.141, 172.67.222.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    etherfi-reallocation.xyz
    Registered
    2026-08-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:48 UTC

    Suggest a correction

  4. ethfi-s5-vote.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ethfi-s5-vote.xyz
    First seen
    2026-11-04 12:26 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 11:25 UTC to 2027-02-02 11:25 UTC
    Logged 2026-11-04 12:24 UTC in IPng Networks Gouda2027h1, entry 314,222,816
    SHA-256 43cd255c9f4109336872fbfefa8d70f79415ad19c45edaf3f6ee28068e21a66e
    Public key SHA-256 e0c7689a0b7346a382b8cae8a78f8c40dd46f03c9f4658764b2cf590d6ea022e
    Brand
    ether.fi
    Addresses
    104.21.43.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:2b0b
    2606:4700:3037::ac43:d7b2
    Cloudflare
    Cloudflare (104.21.43.11, 172.67.215.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ethfi-s5-vote.xyz
    Registered
    2026-05-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  5. q3-etherfi.info US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    q3-etherfi.info
    First seen
    2026-11-04 08:26 UTC
    First published
    2026-11-04 09:19 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:38 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 07:23 UTC to 2027-02-02 08:21 UTC
    Logged 2026-11-04 08:23 UTC in DigiCert Wyvern2027h1, entry 400,040,197
    SHA-256 fe8c69a347a0d334dad61e72013e9d68f6c4dc2ab54895728d283d4410631a19
    Public key SHA-256 d573ba7a5d8835ffcacd72cb48a246611c8fd019da2aea2715970ffc62795cc7
    Brand
    ether.fi
    Addresses
    104.21.17.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:df02
    2606:4700:3036::6815:1142
    Cloudflare
    Cloudflare (104.21.17.66, 172.67.223.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    q3-etherfi.info
    Registered
    2026-09-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  6. register-etherfi.net US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    register-etherfi.net
    First seen
    2026-11-04 02:31 UTC
    First published
    2026-11-04 03:04 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 03:17 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-04 01:27 UTC to 2027-02-02 01:27 UTC
    Logged 2026-11-04 02:25 UTC in DigiCert Sphinx2027h1, entry 349,623,850
    SHA-256 0e3bd2e72e1ea8e0a88149dca723289248316e15cc8c51d8f6d8260555a5fbc1
    Public key SHA-256 7e5f3170ce683d15be8847b2922e92d5413256a9aa3607c62b1b23881ec4f3b4
    PhishDestroy
    Brand
    ether.fi
    Addresses
    104.21.14.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:caec
    2606:4700:3035::6815:e75
    Cloudflare
    Cloudflare (104.21.14.117, 172.67.202.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    register-etherfi.net
    Registered
    2026-03-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  7. enter-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    enter-etherfi.xyz
    First seen
    2026-11-03 23:15 UTC
    First published
    2026-11-04 00:32 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-29 03:20 UTC to 2026-12-28 04:20 UTC
    Logged 2026-11-03 23:12 UTC in DigiCert Wyvern2026h2, entry 2,202,261,394
    SHA-256 54fedfe22c0ebdbe4c637d1acf6387746746eba81872c8af589867ab969a11f4
    Public key SHA-256 728c9c40088a1fac88732cf5cb7c25515b720b1dcd787fcc79499327fc81d6cf
    Brand
    ether.fi
    Addresses
    104.21.68.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:4466
    2606:4700:3031::ac43:c1e6
    Cloudflare
    Cloudflare (104.21.68.102, 172.67.193.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    enter-etherfi.xyz
    Registered
    2026-06-03 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

  8. one-etherfi.ink US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    one-etherfi.ink
    First seen
    2026-11-03 14:16 UTC
    First published
    2026-11-03 14:30 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-03 00:00 UTC to 2027-01-29 21:44 UTC
    Logged 2026-11-03 14:12 UTC in IPng Networks Halloumi2027h1, entry 349,454,037
    SHA-256 01e0d264c7868da596a2a7df1c8cbfb6626516a316c90cc6ab0c656a513cee13
    Public key SHA-256 96054fc98447e99b96fa5f6f7414e1b99957c8106fa26f85095671c8224121d8
    PhishDestroy
    Brand
    ether.fi
    Addresses
    104.21.47.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:2ff2
    2606:4700:3037::ac43:ae8d
    Cloudflare
    Cloudflare (104.21.47.242, 172.67.174.141): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    one-etherfi.ink
    Registered
    2026-08-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  9. enter-etherfi.app US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    enter-etherfi.app
    First seen
    2026-11-03 12:25 UTC
    First published
    2026-11-03 13:19 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-03 11:23 UTC to 2027-02-01 11:23 UTC
    Logged 2026-11-03 12:21 UTC in Google ParcelYard2027h1, entry 590,002,069
    SHA-256 6713b45b7f855497b91c17dc7cc2d41ea8f618fa7ececdcc5f8fedc7803bb842
    Public key SHA-256 312b989f68b2f17d91cce65a779fa89d444e04830fd856cc7882d89cafd4a9c6
    PhishDestroy
    Brand
    ether.fi
    Addresses
    104.21.32.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:9cd2
    2606:4700:3036::6815:20ee
    Cloudflare
    Cloudflare (104.21.32.238, 172.67.156.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    enter-etherfi.app
    Registered
    2026-03-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  10. voting-etherfi.net US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    voting-etherfi.net
    First seen
    2026-11-03 08:56 UTC
    First published
    2026-11-03 09:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 10:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-03 00:00 UTC to 2027-01-29 05:38 UTC
    Logged 2026-11-03 08:50 UTC in Geomys Tuscolo2027h1, entry 456,611,944
    SHA-256 061f1a09144403f87934cffdadb34744762fca9644579c23433f128ae51a5152
    Public key SHA-256 37ad4f34a6bb8bc2f5f04a7b62601dc3f839aa208e45b070e232e1121209d3a0
    Brand
    ether.fi
    Addresses
    104.21.6.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:8702
    2606:4700:3035::6815:69f
    Cloudflare
    Cloudflare (104.21.6.159, 172.67.135.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    voting-etherfi.net
    Registered
    2026-01-02 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  11. earn-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    earn-etherfi.xyz
    First seen
    2026-11-03 08:10 UTC
    First published
    2026-11-03 08:50 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-03 07:11 UTC to 2027-02-01 07:11 UTC
    Logged 2026-11-03 08:09 UTC in Geomys Tuscolo2027h1, entry 456,174,679
    SHA-256 4884ade11b32c2c8e1878df80e0ee74dd3f0d65761a69e76d83c272a095cad30
    Public key SHA-256 1ab3f536cc59c44b36f1a67d1ba7724fb3f8ee521e39d4ceb997c9cbf45c8052
    PhishDestroy
    Brand
    ether.fi
    Addresses
    104.21.36.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:2495
    2606:4700:3033::ac43:c31f
    Cloudflare
    Cloudflare (104.21.36.149, 172.67.195.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    earn-etherfi.xyz
    Registered
    2026-03-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  12. etherfi.shop US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    etherfi.shop
    First seen
    2026-11-03 02:56 UTC
    First published
    2026-11-03 03:45 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 03:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-03 01:52 UTC to 2027-02-01 02:50 UTC
    Logged 2026-11-03 02:52 UTC in DigiCert Wyvern2027h1, entry 383,931,945
    SHA-256 ff11e49bffb711606f620a128b6c1b60471a508f5ccd04b1434b6e0b092269bd
    Public key SHA-256 b42650f5b0fcd99e189b44199736a21e866d086811bf6caccb4a6ce0ae175e49
    Brand
    ether.fi
    Addresses
    104.21.51.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:b681
    2606:4700:3035::6815:339f
    Cloudflare
    Cloudflare (104.21.51.159, 172.67.182.129): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    etherfi.shop
    Registered
    2026-07-07 · Dynadot Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:36 UTC

    Suggest a correction

  13. etherfi.icu US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    etherfi.icu
    First seen
    2026-11-02 11:20 UTC
    First published
    2026-11-02 12:24 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 12:35 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-02 00:00 UTC to 2027-01-22 07:02 UTC
    Logged 2026-11-02 11:19 UTC in Let's Encrypt Willow2027h1, entry 895,128,978
    SHA-256 7605ab0cd830405203285505ef77d0e5f08c35a25c56ab74c2cdd7c74c2fb52e
    Public key SHA-256 6f9a9c15cd28a97b1ba4e0bef624a8636cbc1503457434ac223741d57a826784
    Brand
    ether.fi
    Addresses
    104.21.92.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:5c77
    2606:4700:3037::ac43:c0fd
    Cloudflare
    Cloudflare (104.21.92.119, 172.67.192.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    etherfi.icu
    Registered
    2026-08-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:48 UTC

    Suggest a correction

  14. ether.fi-bh01-evm.com GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    ether.fi-bh01-evm.com
    First seen
    2026-11-02 10:37 UTC
    First published
    2026-11-02 10:48 UTC
    DNS
    Resolves · checked 2026-11-04 11:00 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 196.251.122.84.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 196.251.122.84
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-02 09:32 UTC to 2027-01-31 09:32 UTC
    Logged 2026-11-02 10:31 UTC in Google PlumbersArms2027h1, entry 570,766,549
    SHA-256 52b1bee7f330eb64e3dbeba6fe90a904b538149a736fd1c35f9280a647ef522e
    Public key SHA-256 3447ae7a3c6549160315cd2392a53b4d343ee7e21bf2d3fce3df45fdc1ef6e41
    Brand
    ether.fi
    Addresses
    196.251.122.84 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    fi-bh01-evm.com
    Registered
    2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  15. ethfi-reallocation.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    ethfi-reallocation.xyz
    First seen
    2026-11-02 10:30 UTC
    First published
    2026-11-02 10:48 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:00 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-02 00:00 UTC to 2027-01-18 02:14 UTC
    Logged 2026-11-02 10:28 UTC in IPng Networks Gouda2027h1, entry 292,713,226
    SHA-256 004f4c517d39123631b7ee36d0774c5dd9c74081e38b3161800a064d8b66753f
    Public key SHA-256 81c361268ea9dd27f478b990a1ef65e8db083175c15bbf3c10fcf4000964b3a6
    Brand
    ether.fi
    Addresses
    104.21.25.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:8679
    2606:4700:3036::6815:19bb
    Cloudflare
    Cloudflare (104.21.25.187, 172.67.134.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ethfi-reallocation.xyz
    Registered
    2026-08-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:48 UTC

    Suggest a correction

  16. vote-etherfi.app US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    vote-etherfi.app
    First seen
    2026-11-02 07:51 UTC
    First published
    2026-11-02 08:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:04 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-02 06:48 UTC to 2027-01-31 06:48 UTC
    Logged 2026-11-02 07:46 UTC in Geomys Tuscolo2027h1, entry 442,355,016
    SHA-256 72fe5aca8b4e4d98853a1101b4d2e87d67673951a252fd19c850a654bfa2e4dd
    Public key SHA-256 6ffd19056794a91d3eceb32cebbfd12d9fcc5c13a1dc8ef17181ab5e618685e4
    PhishDestroy
    Brand
    ether.fi
    Addresses
    104.21.22.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:1683
    2606:4700:3032::ac43:cd14
    Cloudflare
    Cloudflare (104.21.22.131, 172.67.205.20): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vote-etherfi.app
    Registered
    2026-03-10 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  17. season5-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    season5-etherfi.xyz
    First seen
    2026-11-02 06:00 UTC
    First published
    2026-11-02 06:52 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 07:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-02 04:59 UTC to 2027-01-31 04:59 UTC
    Logged 2026-11-02 05:58 UTC in Let's Encrypt Sycamore2027h1, entry 898,417,568
    SHA-256 671e5236066673669dde8ad367b47eefb98a4e6231e1dca7a262bfa2a66ae3dd
    Public key SHA-256 efcab71448b7e52eadee713ddf3bec58a2738ca0b975ebf9a596005611d6f369
    PhishDestroy
    Brand
    ether.fi
    Addresses
    104.21.53.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:3526
    2606:4700:3037::ac43:d0ba
    Cloudflare
    Cloudflare (104.21.53.38, 172.67.208.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    season5-etherfi.xyz
    Registered
    2026-03-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  18. votes-etherfi.app US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    votes-etherfi.app
    First seen
    2026-11-02 02:26 UTC
    First published
    2026-11-02 03:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-02 01:22 UTC to 2027-01-31 01:22 UTC
    Logged 2026-11-02 02:21 UTC in DigiCert Wyvern2027h1, entry 376,962,236
    SHA-256 6eb9f1a91c16ea815333cecd7aa0151fdafd2e943169269b5d1967dfd7b42976
    Public key SHA-256 eb2a0a2416c8b5a329d4a1d6dd8b73af1af2f1b4d853e82e1421cf6a13c68ac1
    PhishDestroy
    Brand
    ether.fi
    Addresses
    104.21.88.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:58bf
    2606:4700:3031::ac43:9830
    Cloudflare
    Cloudflare (104.21.88.191, 172.67.152.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    votes-etherfi.app
    Registered
    2026-03-10 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  19. s5-etherfi.app US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    s5-etherfi.app
    First seen
    2026-11-01 21:15 UTC
    First published
    2026-11-01 21:34 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 21:47 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-01 20:14 UTC to 2027-01-30 20:14 UTC
    Logged 2026-11-01 21:12 UTC in Let's Encrypt Willow2027h1, entry 885,420,838
    SHA-256 7805fcb6def5b5517af7d74aef148b06aa5268eb9c6b8f73ac43322c95296ce0
    Public key SHA-256 29fa3783988b18217685bea0998316ee26e6bb968482072a282dadd127a27521
    PhishDestroy
    Brand
    ether.fi
    Addresses
    104.21.23.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:1756
    2606:4700:3036::ac43:d1dc
    Cloudflare
    Cloudflare (104.21.23.86, 172.67.209.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    s5-etherfi.app
    Registered
    2026-03-10 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:46 UTC

    Suggest a correction

  20. seasons5-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 11 d ago
    DetailsHide
    Hostname
    seasons5-etherfi.icu
    First seen
    2026-11-01 15:56 UTC
    First published
    2026-11-01 16:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-02 · checked 2026-11-04 16:31 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-01 00:00 UTC to 2027-01-24 19:53 UTC
    Logged 2026-11-01 15:54 UTC in IPng Networks Halloumi2027h1, entry 330,794,464
    SHA-256 1bd049688812998a813b5fa9fd0ff1c4a39d47c21d5022503b404179f949e26e
    Public key SHA-256 2b9c215440d5b377105e6c23422d4b15df8cb861c495e7a48683d3e039379052
    Brand
    ether.fi
    Addresses
    104.21.95.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:5f19
    2606:4700:3033::ac43:a94a
    Cloudflare
    Cloudflare (104.21.95.25, 172.67.169.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    seasons5-etherfi.icu
    Registered
    2026-10-25 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  21. season5-etherfi.fun
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    season5-etherfi.fun
    First seen
    2026-11-01 11:50 UTC
    First published
    2026-11-01 13:04 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-01 · checked 2026-11-04 13:09 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-30 23:40 UTC to 2027-01-29 00:39 UTC
    Logged 2026-10-31 00:40 UTC in Google PlumbersArms2027h1, entry 531,763,668
    SHA-256 d0dd44567f9cf7f36901c06c72fd7cd482b2d49ac73228903ca28604eb2777b7
    Public key SHA-256 b4ffef70d8cc6dce699168b278734af2ce68ea6ce8315c1909eedb88bc616fb3
    Brand
    ether.fi
    Domain
    season5-etherfi.fun
    Registered
    2026-10-31 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  22. season5-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    season5-etherfi.icu
    First seen
    2026-11-01 11:50 UTC
    First published
    2026-11-01 13:04 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:09 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-30 23:41 UTC to 2027-01-28 23:41 UTC
    Logged 2026-10-31 00:39 UTC in Let's Encrypt Sycamore2027h1, entry 863,863,398
    SHA-256 187f0bb937a195a00fa9300df8ebbe5805d26f3e5af87262ac8d0f37dea9c355
    Public key SHA-256 2d87120ec29cfb44107c101830081ee4c4bd356ce95ede62c474a3041174a056
    Brand
    ether.fi
    Addresses
    104.21.38.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:261b
    2606:4700:3037::ac43:da21
    Cloudflare
    Cloudflare (104.21.38.27, 172.67.218.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    season5-etherfi.icu
    Registered
    2026-10-31 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:17 UTC

    Suggest a correction

  23. voting-etherfi.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    voting-etherfi.app
    First seen
    2026-11-01 11:50 UTC
    First published
    2026-11-01 13:04 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:09 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-01 01:16 UTC to 2027-01-27 19:54 UTC
    Logged 2026-11-01 01:26 UTC in Let's Encrypt Sycamore2027h1, entry 880,177,421
    SHA-256 345ba224c6cd0f9163037d7911aa9094e7acbdc2505e9ba683da613c23f62e06
    Public key SHA-256 80ab39d24718deef9756256fb072350c240b4ae4d6e9a7424d3346af56f23828
    Brand
    ether.fi
    Addresses
    104.21.68.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:443a
    2606:4700:3037::ac43:bbc0
    Cloudflare
    Cloudflare (104.21.68.58, 172.67.187.192): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    voting-etherfi.app
    Registered
    2026-01-01 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:46 UTC

    Suggest a correction

  24. ethfi-dashboard.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    ethfi-dashboard.xyz
    First seen
    2026-11-01 11:41 UTC
    First published
    2026-11-01 11:54 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 12:08 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-01 10:37 UTC to 2027-01-30 11:36 UTC
    Logged 2026-11-01 11:37 UTC in DigiCert Wyvern2027h1, entry 373,130,074
    SHA-256 72b567f495918fed2c9661313681d2f7174a559f7a277b6ac7d4a848356aea3f
    Public key SHA-256 7f1ca70eaed9b5db72e8479fa9b499f2098ef9c8f246271672dadcbb83da514d
    Brand
    ether.fi
    Addresses
    104.21.31.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:1fe8
    2606:4700:3032::ac43:b4bd
    Cloudflare
    Cloudflare (104.21.31.232, 172.67.180.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ethfi-dashboard.xyz
    Registered
    2026-09-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:48 UTC

    Suggest a correction

  25. ethfi-proposal.icu US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    ethfi-proposal.icu
    First seen
    2026-10-31 22:06 UTC
    First published
    2026-10-31 22:45 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 22:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-31 21:00 UTC to 2027-01-29 21:57 UTC
    Logged 2026-10-31 22:00 UTC in Let's Encrypt Willow2027h1, entry 870,550,532
    SHA-256 c745cf1641503105b641addfd6951fe095a88ebff8ed6ce09cef2765dbfecb62
    Public key SHA-256 411c51fe194cdef09639b0294dc9bdf3e29047db8af1dff1559698e8b152df9b
    Brand
    ether.fi
    Addresses
    104.21.3.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:3ea
    2606:4700:3034::ac43:8352
    Cloudflare
    Cloudflare (104.21.3.234, 172.67.131.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ethfi-proposal.icu
    Registered
    2026-09-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:48 UTC

    Suggest a correction

  26. vote-s5-etherfi.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    vote-s5-etherfi.xyz
    First seen
    2026-10-31 17:26 UTC
    First published
    2026-10-31 17:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 16:26 UTC to 2027-01-29 16:26 UTC
    Logged 2026-10-31 17:24 UTC in Google PlumbersArms2027h1, entry 542,978,115
    SHA-256 8d462ace7f2a0fd738844ff501cbab98bceb1449ca67b393ae10b17d0a3360d0
    Public key SHA-256 054449e2d8226b9fa8ae9d1ced3f7d144d3d119aa039d4e6460b0fc0b09b5cfc
    Brand
    ether.fi
    Addresses
    104.21.67.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.197, 172.67.180.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vote-s5-etherfi.xyz
    Registered
    2026-05-07 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:17 UTC

    Suggest a correction

  27. snapshot-etherfi.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    snapshot-etherfi.app
    First seen
    2026-10-31 17:01 UTC
    First published
    2026-10-31 17:58 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 16:00 UTC to 2027-01-29 16:00 UTC
    Logged 2026-10-31 16:59 UTC in Google PlumbersArms2027h1, entry 542,651,687
    SHA-256 44ce581511710761567b0e7483c27cdc38755b453bf5f1cf7ccab2263cee288c
    Public key SHA-256 50dffb6184efcf58d2e171399b9adeb6b60aa8c4af97aa4eff1374440854e4e7
    PhishDestroy
    Brand
    ether.fi
    Addresses
    104.21.60.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.199, 172.67.201.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    snapshot-etherfi.app
    Registered
    2026-03-09 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:46 UTC

    Suggest a correction

  28. rewards-etherfi.click US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    rewards-etherfi.click
    First seen
    2026-10-31 05:44 UTC
    First published
    2026-10-31 06:08 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 06:11 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-29 22:10 UTC to 2027-01-27 22:10 UTC
    Logged 2026-10-29 23:09 UTC in Geomys Tuscolo2027h1, entry 400,280,223
    SHA-256 65d3551ca485c20627188735b9dce9f73192391cbeb656a6cb7366d5f1404fdb
    Public key SHA-256 46f7a0c5b8abc8325548c7b468d604f5938c681faf7ec37d13afeb8d7b834123
    Brand
    ether.fi
    Addresses
    104.21.61.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:d579
    2606:4700:3037::6815:3dc3
    Cloudflare
    Cloudflare (104.21.61.195, 172.67.213.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rewards-etherfi.click
    Registered
    2026-10-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  29. rewards-etherfi.fun US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    rewards-etherfi.fun
    First seen
    2026-10-31 05:44 UTC
    First published
    2026-10-31 06:08 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-03 · checked 2026-11-05 06:11 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-29 22:13 UTC to 2027-01-27 22:13 UTC
    Logged 2026-10-29 23:11 UTC in Let's Encrypt Willow2027h1, entry 840,093,592
    SHA-256 15cf1e8ff2a46744b99c92f5d7280df9c56cea45f1fccb41e06bdb03264d43a1
    Public key SHA-256 d31e6d7356bd95f2c50d2eac1bb35a56be45bcd3441112cb8edac3e066e7436e
    Brand
    ether.fi
    Addresses
    104.21.66.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:c985
    2606:4700:3037::6815:423d
    Cloudflare
    Cloudflare (104.21.66.61, 172.67.201.133): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rewards-etherfi.fun
    Registered
    2026-10-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  30. rewards-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    rewards-etherfi.icu
    First seen
    2026-10-31 05:44 UTC
    First published
    2026-10-31 06:08 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 06:11 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-29 22:14 UTC to 2027-01-27 22:14 UTC
    Logged 2026-10-29 23:12 UTC in Let's Encrypt Sycamore2027h1, entry 846,202,742
    SHA-256 0b667e1464c8ce738b7e3904b0c5401c3df21f9ac0142ef2cee5dbbbac37764c
    Public key SHA-256 37eb837e3cc237fc840b72074082a42134f02b70b217ef45398dfb91d2058776
    Brand
    ether.fi
    Addresses
    104.21.46.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:2e8c
    2606:4700:3035::ac43:8b34
    Cloudflare
    Cloudflare (104.21.46.140, 172.67.139.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rewards-etherfi.icu
    Registered
    2026-10-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  31. rewards-etherfi.top US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    rewards-etherfi.top
    First seen
    2026-10-31 05:44 UTC
    First published
    2026-10-31 06:08 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-03 · checked 2026-11-05 06:11 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 22:10 UTC to 2027-01-27 22:10 UTC
    Logged 2026-10-29 23:09 UTC in Let's Encrypt Willow2027h1, entry 840,065,867
    SHA-256 c47b5038873a78360f01e3742a0016c48fa3bc9dbe6f4cad0e5518baea329631
    Public key SHA-256 c67c90781774b71465cac4631ba2d6800da67273b17f91bebcbf48dcff76b5aa
    Brand
    ether.fi
    Addresses
    104.21.42.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:d651
    2606:4700:3035::6815:2afd
    Cloudflare
    Cloudflare (104.21.42.253, 172.67.214.81): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rewards-etherfi.top
    Registered
    2026-10-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  32. season5-etherfi.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    season5-etherfi.click
    First seen
    2026-10-31 00:41 UTC
    First published
    2026-10-31 00:45 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-30 23:39 UTC to 2027-01-29 00:37 UTC
    Logged 2026-10-31 00:39 UTC in Google ParcelYard2027h1, entry 531,123,350
    SHA-256 4b66018d7614ac6f14fe13de3994a009dc85332e428439b1f2ca5902034264c0
    Public key SHA-256 9892b177063d840a525c0f58f9b20daca748f93653a3113ddeda6960a8eeedaa
    Brand
    ether.fi
    Addresses
    104.21.43.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.37, 172.67.218.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    season5-etherfi.click
    Registered
    2026-10-31 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  33. vote-etherfi.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    vote-etherfi.digital
    First seen
    2026-10-31 00:15 UTC
    First published
    2026-10-31 00:45 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-10-31 00:00 UTC to 2027-01-20 10:53 UTC
    Logged 2026-10-31 00:11 UTC in Let's Encrypt Sycamore2027h1, entry 863,554,191
    SHA-256 c6e162a05de1488682602b62c5f44fe94c87738f9bde3bfc076b0701e7218c2c
    Public key SHA-256 c49ccde7d5e6b74d0f78d0a2f0f0f6359d16871b85d2af433773b8764c1a9ea4
    Brand
    ether.fi
    Addresses
    104.21.29.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.89, 172.67.148.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vote-etherfi.digital
    Registered
    2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  34. etherfi-governance.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    etherfi-governance.xyz
    First seen
    2026-10-30 18:41 UTC
    First published
    2026-10-30 19:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 19:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-30 17:39 UTC to 2027-01-28 18:36 UTC
    Logged 2026-10-30 18:39 UTC in Google PlumbersArms2027h1, entry 527,594,910
    SHA-256 6e762b0df0ce54a77610a103934853f15df86878db6195757979cea1eab9e40d
    Public key SHA-256 43bccf0d29fa0acad262b9b9b99127fdad3dd613075247f2b3c6133d8d332945
    Brand
    ether.fi
    Addresses
    104.21.54.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.73, 172.67.136.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    etherfi-governance.xyz
    Registered
    2026-09-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  35. arbitrum-etherfi.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    arbitrum-etherfi.net
    First seen
    2026-10-30 13:41 UTC
    First published
    2026-10-30 13:53 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 14:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 12:41 UTC to 2027-01-28 12:41 UTC
    Logged 2026-10-30 13:39 UTC in Google ParcelYard2027h1, entry 523,269,760
    SHA-256 4fa39b064d682274a17cde8015d26ec0ec66c45ce0a6c00a3e4fe408586ddd7b
    Public key SHA-256 51112b0f1def4223297d7ac69221843ecb6b84aa5fcceb484c9c0a82c9e9f658
    Brands
    Arbitrum, ether.fi
    Addresses
    104.21.85.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.217, 172.67.211.126): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    arbitrum-etherfi.net
    Registered
    2026-05-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  36. season5-proposal-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    season5-proposal-etherfi.icu
    First seen
    2026-10-30 11:41 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:51 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 20:01 UTC to 2027-01-26 20:01 UTC
    Logged 2026-10-28 20:59 UTC in Google ParcelYard2027h1, entry 494,760,308
    SHA-256 05f4250909b921c63f78babc35b3d9bbb425a2eee9e0a64d53f6c39439f68696
    Public key SHA-256 ce75c6e38e2c834bf992c0531e6e768f8a7efbdc1884bb0b5fd80ab9105c7950
    Brand
    ether.fi
    Addresses
    104.21.61.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:d8f9
    2606:4700:3037::6815:3ded
    Cloudflare
    Cloudflare (104.21.61.237, 172.67.216.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    season5-proposal-etherfi.icu
    Registered
    2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  37. season5-proposal-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    season5-proposal-etherfi.xyz
    First seen
    2026-10-30 11:41 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:51 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 20:15 UTC to 2027-01-26 20:15 UTC
    Logged 2026-10-28 21:13 UTC in Geomys Tuscolo2027h1, entry 386,782,936
    SHA-256 2f872ac5159991e71620664b80ac1e745668cf5d5450b71b21773871f7b45611
    Public key SHA-256 ecec33cdec849cc4ca9f54092ab5fb2a449169bb82e64218495f038e9dceacbf
    Brand
    ether.fi
    Addresses
    104.21.25.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:1939
    2606:4700:3033::ac43:df03
    Cloudflare
    Cloudflare (104.21.25.57, 172.67.223.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    season5-proposal-etherfi.xyz
    Registered
    2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  38. join-etherfi.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    join-etherfi.xyz
    First seen
    2026-10-30 06:10 UTC
    First published
    2026-10-30 06:35 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 06:39 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-30 13:49 UTC to 2026-12-29 14:49 UTC
    Logged 2026-10-30 06:06 UTC in DigiCert Wyvern2026h2, entry 2,193,467,331
    SHA-256 4ba822858bda66a805797d8943401e4375ed8f282a54074c53b27d3769fd885f
    Public key SHA-256 1862b563fda706b394ae1ed3f7bffe87abc12e7d01b09a10e55616df28bf2613
    Brand
    ether.fi
    Addresses
    104.21.66.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.6, 172.67.197.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    join-etherfi.xyz
    Registered
    2026-06-04 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  39. season5-proposal-etherfi.fun US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    season5-proposal-etherfi.fun
    First seen
    2026-10-29 23:44 UTC
    First published
    2026-10-30 00:48 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-03 · checked 2026-11-05 00:53 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 19:59 UTC to 2027-01-26 19:59 UTC
    Logged 2026-10-28 20:57 UTC in IPng Networks Halloumi2027h1, entry 292,956,275
    SHA-256 44d171b53953665b02fb3e8002d25800caa7093ec3e59d9c8cd674d9a8a2e61d
    Public key SHA-256 a2dd90185cc625b62adc2d7a7d930a43c4183f086d64497ce271c680b827c27d
    Brand
    ether.fi
    Addresses
    104.21.47.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:a9ac
    2606:4700:3035::6815:2f08
    Cloudflare
    Cloudflare (104.21.47.8, 172.67.169.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    season5-proposal-etherfi.fun
    Registered
    2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  40. 57-governance-etherfi.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    57-governance-etherfi.pages.dev
    First seen
    2026-10-29 17:40 UTC
    First published
    2026-10-29 18:29 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:34 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-29 07:14 UTC to 2027-01-27 07:14 UTC
    Logged 2026-10-29 08:13 UTC in Let's Encrypt Willow2027h1, entry 828,996,908
    SHA-256 22b9ba246c50d5d35d7834f488c779a515be5d3f95c546b3f9c45a3037fbcdd1
    Public key SHA-256 ef485081d0864d873302ebe89e58bd962bdd9a8944532e6ac50ec2893605a945
    Brand
    ether.fi
    Addresses
    172.66.44.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2ca8
    2606:4700:310c::ac42:2f58
    Cloudflare
    Cloudflare (172.66.44.168, 172.66.47.88): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  41. season5-proposal-etherfi.top US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    season5-proposal-etherfi.top
    First seen
    2026-10-29 17:40 UTC
    First published
    2026-10-29 18:29 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-04 18:34 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-28 19:59 UTC to 2027-01-26 19:59 UTC
    Logged 2026-10-28 20:58 UTC in Google PlumbersArms2027h1, entry 495,424,168
    SHA-256 0ed8122259a5a686f65f36972336b9effaabdd86600812dbf427da8520b5809e
    Public key SHA-256 82be818e9c5b2050efa3107e1885e5018ec00cd2bd758a28662199308948e075
    Brand
    ether.fi
    Addresses
    104.21.11.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:a51d
    2606:4700:3037::6815:b23
    Cloudflare
    Cloudflare (104.21.11.35, 172.67.165.29): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    season5-proposal-etherfi.top
    Registered
    2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  42. 56-governance-etherfi.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    56-governance-etherfi.pages.dev
    First seen
    2026-10-29 11:38 UTC
    First published
    2026-10-29 11:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-04 12:02 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 17:29 UTC to 2027-01-26 17:29 UTC
    Logged 2026-10-28 18:27 UTC in Google PlumbersArms2027h1, entry 493,632,564
    SHA-256 5d9c7162ea142c896f979c5e513e71f751259c9749e5cb7934c3ca107005f3ea
    Public key SHA-256 69466babd6006a8ee8abef50f4cbabcdb124a0e3d87458ec42df178151ee1144
    Brand
    ether.fi
    Addresses
    172.66.44.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c57
    2606:4700:310c::ac42:2fa9
    Cloudflare
    Cloudflare (172.66.44.87, 172.66.47.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  43. season5-proposal-etherfi.click US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    season5-proposal-etherfi.click
    First seen
    2026-10-29 11:38 UTC
    First published
    2026-10-29 11:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 12:02 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 20:00 UTC to 2027-01-26 20:00 UTC
    Logged 2026-10-28 20:58 UTC in Google ParcelYard2027h1, entry 494,751,083
    SHA-256 243d8e65c91964e5e32f76216c9f7e67bc4962d78e1ff26d29335d60fbd1666e
    Public key SHA-256 189a17026d74d19d366f1617630731ab26ffd2a1a9c8013df0c7d48b2265c3ab
    Brand
    ether.fi
    Addresses
    104.21.83.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:53d1
    2606:4700:3036::ac43:b5f2
    Cloudflare
    Cloudflare (104.21.83.209, 172.67.181.242): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    season5-proposal-etherfi.click
    Registered
    2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  44. proposal-s5-etherfi.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    proposal-s5-etherfi.icu
    First seen
    2026-10-29 01:41 UTC
    First published
    2026-10-29 02:34 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-04 · checked 2026-11-05 02:42 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-10-29 00:00 UTC to 2027-01-26 23:41 UTC
    Logged 2026-10-29 01:36 UTC in IPng Networks Halloumi2027h1, entry 295,349,226
    SHA-256 04f602f509fb74a4cc6475c9517981a588010ad70ad2332148a3410d0112d52c
    Public key SHA-256 1e84e42cc8279681dbb439cb76c6b6e56bbd6941143d72b2109f3d789c39b3f4
    Brand
    ether.fi
    Addresses
    104.21.83.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.138, 172.67.177.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    proposal-s5-etherfi.icu
    Registered
    2026-10-26 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  45. 55-governance-etherfi.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    55-governance-etherfi.pages.dev
    First seen
    2026-10-28 23:38 UTC
    First published
    2026-10-29 00:30 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-05 00:41 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 11:38 UTC to 2027-01-26 11:38 UTC
    Logged 2026-10-28 12:36 UTC in Let's Encrypt Willow2027h1, entry 814,649,629
    SHA-256 87af347db571b40e4cc441f3a0c325a19ad34c49ecc6e608d25de03c1b25bc40
    Public key SHA-256 93945de63995c430a25a81b7ef37738a19b73740732b829e0ef7dc58ce1a1d82
    Brand
    ether.fi
    Addresses
    172.66.44.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c94
    2606:4700:310c::ac42:2f6c
    Cloudflare
    Cloudflare (172.66.44.148, 172.66.47.108): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  46. etherfi.ink
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    etherfi.ink
    First seen
    2026-10-28 20:36 UTC
    First published
    2026-10-28 21:24 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-28 · checked 2026-11-04 21:31 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-28 19:35 UTC to 2027-01-26 20:34 UTC
    Logged 2026-10-28 20:35 UTC in IPng Networks Gouda2027h1, entry 251,974,202
    SHA-256 fc92f340f00de4b0cac8b1515191305d1754bb5c6bc869047206e667501467b3
    Public key SHA-256 3ed364b4fe4c08dae9f5567168295041f6ce34b306556c6aee3c7833d7a147d4
    Brand
    ether.fi
    Domain
    etherfi.ink
    Registered
    2026-08-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:44 UTC

    Suggest a correction

  47. proposal-s5-etherfi.top US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    proposal-s5-etherfi.top
    First seen
    2026-10-28 17:37 UTC
    First published
    2026-10-28 18:18 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-04 18:30 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    ether.fi
    Addresses
    104.21.93.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:5dec
    2606:4700:3036::ac43:d88b
    Cloudflare
    Cloudflare (104.21.93.236, 172.67.216.139): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    proposal-s5-etherfi.top
    Registered
    2026-10-26 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:44 UTC

    Suggest a correction

  48. register-etherfi.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    register-etherfi.com
    First seen
    2026-10-28 10:46 UTC
    First published
    2026-10-28 11:02 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:08 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 09:44 UTC to 2027-01-26 09:44 UTC
    Logged 2026-10-28 10:43 UTC in Google PlumbersArms2027h1, entry 487,590,077
    SHA-256 7af13c3cf2c2f9a88e23df53113a4ae4f5266650c1304532fcbbd1e6817b0998
    Public key SHA-256 af35c909d37230e46ad45091c84aab1047b8df7e408e225d8bebb0d4c8dd7eab
    Brand
    ether.fi
    Addresses
    104.21.15.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.182, 172.67.163.193): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    register-etherfi.com
    Registered
    2026-06-05 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:44 UTC

    Suggest a correction

  49. vote-etherfi.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    vote-etherfi.pro
    First seen
    2026-10-28 07:46 UTC
    First published
    2026-10-28 08:43 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-28 06:40 UTC to 2027-01-26 07:39 UTC
    Logged 2026-10-28 07:40 UTC in Google ParcelYard2027h1, entry 484,647,766
    SHA-256 73705ec8490583a475a1243d4f97248ff6c26ee2d936618b6f5a8c1666a8ea4f
    Public key SHA-256 7fe6793b602f3f9518c9f0808ade192edafcb9d22ca4f440762be997ee403438
    Brand
    ether.fi
    Addresses
    104.21.37.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.169, 172.67.210.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vote-etherfi.pro
    Registered
    2026-08-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:44 UTC

    Suggest a correction

  50. etherfi.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    etherfi.pro
    First seen
    2026-10-27 23:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-25 14:56 UTC to 2027-01-23 15:56 UTC
    Logged 2026-10-27 23:05 UTC in DigiCert Wyvern2027h1, entry 325,755,766
    SHA-256 230aa2e4d98a831d90a0cccf12243204104e7d28f86c9e7b9113d8a7610525e3
    Public key SHA-256 4b17d1ff314a7fb36fe9d2cfcf7e2b38486074a9939b42f6dde73e5cde63f7a5
    Brand
    ether.fi
    Addresses
    104.21.31.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.145, 172.67.177.200): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    etherfi.pro
    Registered
    2026-08-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  51. etherfi.digital US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    etherfi.digital
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    ether.fi
    Addresses
    104.21.91.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:5b73
    2606:4700:3032::ac43:d8b4
    Cloudflare
    Cloudflare (104.21.91.115, 172.67.216.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    etherfi.digital
    Registered
    2026-08-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

  52. etherfi-v4.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    etherfi-v4.com
    First seen
    2026-10-26 20:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 05:24 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in DigiCert Sphinx2027h1, entry 280,245,903
    SHA-256 ddc5a1f90e3945216fbabed62d94deb7e60c9377e38279caa2ed53a43f7788e9
    PhishDestroy
    Brand
    ether.fi
    Addresses
    104.21.7.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.106, 172.67.130.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    etherfi-v4.com
    Registered
    2026-06-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

  53. etherfi-club.app US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    etherfi-club.app
    First seen
    2026-10-26 00:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 05:24 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. We matched the new listing
    3. Latest DNS check
    PhishDestroy
    Brand
    ether.fi
    Addresses
    104.21.41.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:2983
    2606:4700:3037::ac43:935e
    Cloudflare
    Cloudflare (104.21.41.131, 172.67.147.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    etherfi-club.app
    Registered
    2026-04-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:06 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches ether.fi when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Crypto & web3

All brands →