ether.fi

Crypto & web3 Cayman Islandsether.fiEthereum restaking
Cert findings · 24 h
4
Cert findings · 7 days
43
42 reported or listed · 1 on Spamhaus DROP
Registered lookalikes
20
9 listed by a source or an address list
Official domains
2
verified from ether.fi's own sites and records

Registered lookalikes

Checked daily · 2026-11-04 22:41 UTC

Spellings of ether.fi registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.

Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.

9 of the 20 are listed by a source or resolve to a listed address, checked hourly.

  1. rewards-etherfi.click US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · the name with an added word
    Listed by MetaMaskCloudflare
    DetailsHide details for rewards-etherfi.click
    Domain
    rewards-etherfi.click
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-10-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · rewards-etherfi.click · in the feed since 2026-10-31 05:42 UTC
    Addresses
    104.21.61.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:d579
    2606:4700:3037::6815:3dc3
    Cloudflare
    Cloudflare (104.21.61.195, 172.67.213.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. rewards-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · the name with an added word
    Listed by MetaMaskCloudflare
    DetailsHide details for rewards-etherfi.icu
    Domain
    rewards-etherfi.icu
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-10-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · rewards-etherfi.icu · in the feed since 2026-10-31 05:42 UTC
    Addresses
    104.21.46.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:2e8c
    2606:4700:3035::ac43:8b34
    Cloudflare
    Cloudflare (104.21.46.140, 172.67.139.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. etehrfi.trade US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · two letters swapped
    Listed by MetaMaskCloudflare
    DetailsHide details for etehrfi.trade
    Domain
    etehrfi.trade
    Spelling
    Spelled like ether.fi with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .trade zone file, already registered
    Registered
    2026-10-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etehrfi.trade · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.65.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:41cf
    2606:4700:3037::ac43:a70e
    Cloudflare
    Cloudflare (104.21.65.207, 172.67.167.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. etehrfi.pro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · two letters swapped
    Listed by MetaMaskCloudflare
    DetailsHide details for etehrfi.pro
    Domain
    etehrfi.pro
    Spelling
    Spelled like ether.fi with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-10-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etehrfi.pro · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.64.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:4009
    2606:4700:3036::ac43:adbc
    Cloudflare
    Cloudflare (104.21.64.9, 172.67.173.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. etherr-fi.info SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of ether.fi · a doubled letter
    3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
    DetailsHide details for etherr-fi.info
    Domain
    etherr-fi.info
    Spelling
    Spelled like ether.fi with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-07-18 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (etherr-fi.info resolved to it 2026-11-04 23:40 UTC), 172.232.24.235 (etherr-fi.info resolved to it 2026-11-04 23:40 UTC), 172.234.25.42 (etherr-fi.info resolved to it 2026-11-04 23:40 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx1.titan.email
    mx2.titan.email
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. etherfii.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · a doubled letter
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfii.xyz
    Domain
    etherfii.xyz
    Spelling
    Spelled like ether.fi with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-08 · Global Domain Group LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfii.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.81.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:519f
    2606:4700:3037::ac43:be03
    Cloudflare
    Cloudflare (104.21.81.159, 172.67.190.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. governance-ether.fi FR · AS16276 · OVH OVH SASLookalike of ether.fi · the name with the word “governance”
    Listed by MetaMaskParking page · emailverification.info suspended-domain page
    DetailsHide details for governance-ether.fi
    Domain
    governance-ether.fi
    Spelling
    The name of ether.fi with the word “governance”
    First found
    2026-11-04 · the day the daily DNS check first found it registered
    Registered
    2026-06-03
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · governance-ether.fi · in the feed since 2026-10-27 05:34 UTC
    Addresses
    54.38.220.85 · France · AS16276 OVH OVH SAS · emailverification.info suspended-domain page (parking page)
    Parking page · emailverification.info suspended-domain page
    The registry delegates governance-ether.fi to emailverification.info suspended-domain page’s nameservers, which answer for it. emailverification.info suspended-domain page (54.38.220.85): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. ethfi-rewards.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · the name with an added word
    Listed by MetaMaskCloudflare
    DetailsHide details for ethfi-rewards.xyz
    Domain
    ethfi-rewards.xyz
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-rewards.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.9.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:9af
    2606:4700:3037::ac43:a123
    Cloudflare
    Cloudflare (104.21.9.175, 172.67.161.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. ethfi-s5-rewards.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · the name with an added word
    Listed by MetaMaskCloudflare
    DetailsHide details for ethfi-s5-rewards.xyz
    Domain
    ethfi-s5-rewards.xyz
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-s5-rewards.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.20.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:bf54
    2606:4700:3035::6815:142b
    Cloudflare
    Cloudflare (104.21.20.43, 172.67.191.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. claimetherfi.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · the name with an added word
    PhishDestroy CommunitySuspicious · mediumParking page · Afternic
    DetailsHide details for claimetherfi.xyz
    Domain
    claimetherfi.xyz
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-02 · GMO Internet Group, Inc. d/b/a Onamae.com
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates claimetherfi.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. etherrfi.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · a doubled letter
    Parking page · Afternic
    DetailsHide details for etherrfi.xyz
    Domain
    etherrfi.xyz
    Spelling
    Spelled like ether.fi with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-02 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates etherrfi.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. ethrefi.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · two letters swapped
    PhishDestroy CommunitySuspicious · mediumParking page · Afternic
    DetailsHide details for ethrefi.xyz
    Domain
    ethrefi.xyz
    Spelling
    Spelled like ether.fi with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-02 · GMO Internet Group, Inc. d/b/a Onamae.com
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates ethrefi.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. ethfitrack.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · the name with an added word
    Parking page · Afternic
    DetailsHide details for ethfitrack.xyz
    Domain
    ethfitrack.xyz
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-15 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates ethfitrack.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. trackethfi.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · the name with an added word
    Parking page · Afternic
    DetailsHide details for trackethfi.xyz
    Domain
    trackethfi.xyz
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-15 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates trackethfi.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. ethfibank.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · the name with an added word
    Parking page · Afternic
    DetailsHide details for ethfibank.xyz
    Domain
    ethfibank.xyz
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-13 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates ethfibank.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. ethfipay.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · the name with an added word
    Parking page · Afternic
    DetailsHide details for ethfipay.xyz
    Domain
    ethfipay.xyz
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-13 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates ethfipay.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. etherffi.xyz DE · AS47846 · SEDO-AS SEDO GmbHLookalike of ether.fi · a doubled letter
    Parking page · SedoMX present
    DetailsHide details for etherffi.xyz
    Domain
    etherffi.xyz
    Spelling
    Spelled like ether.fi with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-08 · NameSilo, LLC
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    MX
    mx1.titan.email
    mx2.titan.email
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. etherfi-claim.infoLookalike of ether.fi · the name with an added word
    PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
    DetailsHide details for etherfi-claim.info
    Domain
    etherfi-claim.info
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2025-12-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. ethficard.xyz AU · AS154653 · ParkLogic Pty LtdLookalike of ether.fi · the name with an added word
    Parking page · ParkLogicMX present
    DetailsHide details for ethficard.xyz
    Domain
    ethficard.xyz
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-09-29 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    162.4.84.215 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates ethficard.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.215): a parking service. It answers for names that are typically for sale or unused.
    MX
    mx156.hostedmxserver.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. rewards-ethfi.xyz AU · AS154653 · ParkLogic Pty LtdLookalike of ether.fi · the name with an added word
    Parking page · ParkLogicMX present
    DetailsHide details for rewards-ethfi.xyz
    Domain
    rewards-ethfi.xyz
    Spelling
    The name of ether.fi with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-09-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    162.4.84.215 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates rewards-ethfi.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.215): a parking service. It answers for names that are typically for sale or unused.
    MX
    mx156.hostedmxserver.com
    Daily check
    Ended 2026-11-04 22:41 UTC

New registrations using the name

New domains with ether.fi's name in them, from registry zone files (ICANN CZDS), checked daily like the lookalikes above. We matched them by name alone; resellers, fans and other businesses register names like these too. Our zone data terms apply to them.

100 of 119 shown: listed ones first, then the newest registrations.

  1. app-etherfi.top US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for app-etherfi.top
    Domain
    app-etherfi.top
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · app-etherfi.top · in the feed since 2026-11-04 11:50 UTC
    Addresses
    104.21.5.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:9aab
    2606:4700:3036::6815:5be
    Cloudflare
    Cloudflare (104.21.5.190, 172.67.154.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. etherfi.top GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “etherfi”
    Listed by MetaMaskAddress on Spamhaus DROP
    DetailsHide details for etherfi.top
    Domain
    etherfi.top
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi.top · in the feed since 2026-11-04 11:50 UTC
    Address on Spamhaus DROP
    192.162.199.82 is on Spamhaus DROP · etherfi.top resolved to it 2026-11-04 23:40 UTC
    Addresses
    192.162.199.82 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. s5-etherfi.top US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for s5-etherfi.top
    Domain
    s5-etherfi.top
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · s5-etherfi.top · in the feed since 2026-11-04 11:50 UTC
    Addresses
    104.21.69.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:4551
    2606:4700:3036::ac43:ce83
    Cloudflare
    Cloudflare (104.21.69.81, 172.67.206.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. app-etherfi.click US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for app-etherfi.click
    Domain
    app-etherfi.click
    Match
    A new registration containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-03 · the day the .click zone file first listed it as a new registration
    Registered
    2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · app-etherfi.click · in the feed since 2026-11-04 11:50 UTC
    Addresses
    104.21.81.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:518f
    2606:4700:3033::ac43:a176
    Cloudflare
    Cloudflare (104.21.81.143, 172.67.161.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. app-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for app-etherfi.icu
    Domain
    app-etherfi.icu
    Match
    A new registration containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-03 · the day the .icu zone file first listed it as a new registration
    Registered
    2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · app-etherfi.icu · in the feed since 2026-11-04 11:50 UTC
    Addresses
    104.21.17.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:119a
    2606:4700:3034::ac43:b10e
    Cloudflare
    Cloudflare (104.21.17.154, 172.67.177.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. s5-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for s5-etherfi.icu
    Domain
    s5-etherfi.icu
    Match
    A new registration containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-03 · the day the .icu zone file first listed it as a new registration
    Registered
    2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · s5-etherfi.icu · in the feed since 2026-11-04 11:50 UTC
    Addresses
    104.21.8.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:84d
    2606:4700:3036::ac43:9cef
    Cloudflare
    Cloudflare (104.21.8.77, 172.67.156.239): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. season5-etherfi.click US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskReported by PhishDestroyCloudflare
    DetailsHide details for season5-etherfi.click
    Domain
    season5-etherfi.click
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-10-31 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · season5-etherfi.click · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · season5-etherfi.click · in the feed since 2026-11-03 21:22 UTC
    Addresses
    104.21.43.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:2b25
    2606:4700:3034::ac43:da02
    Cloudflare
    Cloudflare (104.21.43.37, 172.67.218.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. season5-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for season5-etherfi.icu
    Domain
    season5-etherfi.icu
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-10-31 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · season5-etherfi.icu · in the feed since 2026-11-01 11:44 UTC
    Addresses
    104.21.38.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:261b
    2606:4700:3037::ac43:da21
    Cloudflare
    Cloudflare (104.21.38.27, 172.67.218.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. ether-fi.helpContains “ether-fi”
    Listed by MetaMaskMX present
    DetailsHide details for ether-fi.help
    Domain
    ether-fi.help
    Match
    A domain containing “ether-fi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .help zone file, already registered
    Registered
    2026-10-28 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ether-fi.help · in the feed since 2026-10-30 11:39 UTC
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. season5-proposal-etherfi.click US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for season5-proposal-etherfi.click
    Domain
    season5-proposal-etherfi.click
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · season5-proposal-etherfi.click · in the feed since 2026-10-29 11:37 UTC
    Addresses
    104.21.83.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:53d1
    2606:4700:3036::ac43:b5f2
    Cloudflare
    Cloudflare (104.21.83.209, 172.67.181.242): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. season5-proposal-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for season5-proposal-etherfi.icu
    Domain
    season5-proposal-etherfi.icu
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · season5-proposal-etherfi.icu · in the feed since 2026-10-30 11:39 UTC
    Addresses
    104.21.61.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:d8f9
    2606:4700:3037::6815:3ded
    Cloudflare
    Cloudflare (104.21.61.237, 172.67.216.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. season5-proposal-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for season5-proposal-etherfi.xyz
    Domain
    season5-proposal-etherfi.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · season5-proposal-etherfi.xyz · in the feed since 2026-10-30 11:39 UTC
    Addresses
    104.21.25.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:1939
    2606:4700:3033::ac43:df03
    Cloudflare
    Cloudflare (104.21.25.57, 172.67.223.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. gov-etherfi.finance US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for gov-etherfi.finance
    Domain
    gov-etherfi.finance
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .finance zone file, already registered
    Registered
    2026-09-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · gov-etherfi.finance · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.2.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:80e0
    2606:4700:3034::6815:248
    Cloudflare
    Cloudflare (104.21.2.72, 172.67.128.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. etherfi-interest.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
    DetailsHide details for etherfi-interest.xyz
    Domain
    etherfi-interest.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-interest.xyz · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · etherfi-interest.xyz · in the feed since 2026-11-03 21:22 UTC
    Addresses
    104.21.34.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:a143
    2606:4700:3035::6815:2282
    Cloudflare
    Cloudflare (104.21.34.130, 172.67.161.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. proposal-ethfi.live US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for proposal-ethfi.live
    Domain
    proposal-ethfi.live
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-09-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · proposal-ethfi.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.86.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:56fb
    2606:4700:3034::ac43:8adc
    Cloudflare
    Cloudflare (104.21.86.251, 172.67.138.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. etherfi-proposal.live US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for etherfi-proposal.live
    Domain
    etherfi-proposal.live
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-09-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-proposal.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.63.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:3f56
    2606:4700:3037::ac43:9057
    Cloudflare
    Cloudflare (104.21.63.86, 172.67.144.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. ethfi-proposal.live US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for ethfi-proposal.live
    Domain
    ethfi-proposal.live
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-09-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-proposal.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.59.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:b3c0
    2606:4700:3032::6815:3b98
    Cloudflare
    Cloudflare (104.21.59.152, 172.67.179.192): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. governance-etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for governance-etherfi.pro
    Domain
    governance-etherfi.pro
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · governance-etherfi.pro · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.74.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:4afe
    2606:4700:3034::ac43:d14e
    Cloudflare
    Cloudflare (104.21.74.254, 172.67.209.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. distributions-ethfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for distributions-ethfi.xyz
    Domain
    distributions-ethfi.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · distributions-ethfi.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.15.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:a557
    2606:4700:3032::6815:ff7
    Cloudflare
    Cloudflare (104.21.15.247, 172.67.165.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. q3-etherfi.info US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for q3-etherfi.info
    Domain
    q3-etherfi.info
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-09-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · q3-etherfi.info · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.17.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:df02
    2606:4700:3036::6815:1142
    Cloudflare
    Cloudflare (104.21.17.66, 172.67.223.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. ethfi-dashboard.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
    DetailsHide details for ethfi-dashboard.xyz
    Domain
    ethfi-dashboard.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-dashboard.xyz · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · ethfi-dashboard.xyz · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.31.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:1fe8
    2606:4700:3032::ac43:b4bd
    Cloudflare
    Cloudflare (104.21.31.232, 172.67.180.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. ethfi-proposal.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for ethfi-proposal.icu
    Domain
    ethfi-proposal.icu
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-09-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-proposal.icu · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.3.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:3ea
    2606:4700:3034::ac43:8352
    Cloudflare
    Cloudflare (104.21.3.234, 172.67.131.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. etherfi-governance.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for etherfi-governance.xyz
    Domain
    etherfi-governance.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-governance.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.54.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:8862
    2606:4700:3034::6815:3649
    Cloudflare
    Cloudflare (104.21.54.73, 172.67.136.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. vote-etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
    DetailsHide details for vote-etherfi.pro
    Domain
    vote-etherfi.pro
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-08-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · vote-etherfi.pro · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · vote-etherfi.pro · in the feed since 2026-11-03 21:22 UTC
    Addresses
    104.21.37.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:d2c3
    2606:4700:3037::6815:25a9
    Cloudflare
    Cloudflare (104.21.37.169, 172.67.210.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
    DetailsHide details for etherfi.pro
    Domain
    etherfi.pro
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-08-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi.pro · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · etherfi.pro · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.31.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:1f91
    2606:4700:3037::ac43:b1c8
    Cloudflare
    Cloudflare (104.21.31.145, 172.67.177.200): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. allocations-ethfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
    DetailsHide details for allocations-ethfi.icu
    Domain
    allocations-ethfi.icu
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-08-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · allocations-ethfi.icu · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · allocations-ethfi.icu · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.50.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:3280
    2606:4700:3037::ac43:a33a
    Cloudflare
    Cloudflare (104.21.50.128, 172.67.163.58): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. etherfi.digital US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for etherfi.digital
    Domain
    etherfi.digital
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .digital zone file, already registered
    Registered
    2026-08-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi.digital · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.91.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:5b73
    2606:4700:3032::ac43:d8b4
    Cloudflare
    Cloudflare (104.21.91.115, 172.67.216.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for etherfi.icu
    Domain
    etherfi.icu
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-08-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi.icu · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.92.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:5c77
    2606:4700:3037::ac43:c0fd
    Cloudflare
    Cloudflare (104.21.92.119, 172.67.192.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. etherfi.live US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for etherfi.live
    Domain
    etherfi.live
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-08-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.12.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:83e8
    2606:4700:3034::6815:c1b
    Cloudflare
    Cloudflare (104.21.12.27, 172.67.131.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. gov-etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for gov-etherfi.pro
    Domain
    gov-etherfi.pro
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-08-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · gov-etherfi.pro · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.71.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:8d3f
    2606:4700:3036::6815:4703
    Cloudflare
    Cloudflare (104.21.71.3, 172.67.141.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. voting-etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for voting-etherfi.pro
    Domain
    voting-etherfi.pro
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-08-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · voting-etherfi.pro · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.31.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:1f5b
    2606:4700:3037::ac43:b029
    Cloudflare
    Cloudflare (104.21.31.91, 172.67.176.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. distribution-ethfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for distribution-ethfi.icu
    Domain
    distribution-ethfi.icu
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-08-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · distribution-ethfi.icu · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.72.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:9a8e
    2606:4700:3035::6815:48c4
    Cloudflare
    Cloudflare (104.21.72.196, 172.67.154.142): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. voting-ethfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for voting-ethfi.icu
    Domain
    voting-ethfi.icu
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-08-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · voting-ethfi.icu · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.15.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:f58
    2606:4700:3035::ac43:a1fe
    Cloudflare
    Cloudflare (104.21.15.88, 172.67.161.254): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. etherfi-distribution.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for etherfi-distribution.xyz
    Domain
    etherfi-distribution.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-distribution.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.83.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:53fc
    2606:4700:3035::ac43:b803
    Cloudflare
    Cloudflare (104.21.83.252, 172.67.184.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. etherfi-proposal.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for etherfi-proposal.icu
    Domain
    etherfi-proposal.icu
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-proposal.icu · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.69.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:d290
    2606:4700:3035::6815:45aa
    Cloudflare
    Cloudflare (104.21.69.170, 172.67.210.144): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. ethfi-distribution.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for ethfi-distribution.xyz
    Domain
    ethfi-distribution.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-distribution.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.75.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:b41d
    2606:4700:3034::6815:4bb8
    Cloudflare
    Cloudflare (104.21.75.184, 172.67.180.29): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. proposal-etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for proposal-etherfi.pro
    Domain
    proposal-etherfi.pro
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · proposal-etherfi.pro · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.76.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:c3bf
    2606:4700:3035::6815:4c89
    Cloudflare
    Cloudflare (104.21.76.137, 172.67.195.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. reallocation-ethfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for reallocation-ethfi.icu
    Domain
    reallocation-ethfi.icu
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · reallocation-ethfi.icu · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.29.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:1d15
    2606:4700:3037::ac43:ab43
    Cloudflare
    Cloudflare (104.21.29.21, 172.67.171.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. vote-etherfi.digital US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for vote-etherfi.digital
    Domain
    vote-etherfi.digital
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .digital zone file, already registered
    Registered
    2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · vote-etherfi.digital · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.29.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:1d59
    2606:4700:3032::ac43:94b4
    Cloudflare
    Cloudflare (104.21.29.89, 172.67.148.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. ethfi-reallocation.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for ethfi-reallocation.xyz
    Domain
    ethfi-reallocation.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-08-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-reallocation.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.25.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:8679
    2606:4700:3036::6815:19bb
    Cloudflare
    Cloudflare (104.21.25.187, 172.67.134.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. etherfi-reallocation.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for etherfi-reallocation.xyz
    Domain
    etherfi-reallocation.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-08-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-reallocation.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.78.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:4e8d
    2606:4700:3036::ac43:de6e
    Cloudflare
    Cloudflare (104.21.78.141, 172.67.222.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. governance-etherfi.news US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for governance-etherfi.news
    Domain
    governance-etherfi.news
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .news zone file, already registered
    Registered
    2026-08-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · governance-etherfi.news · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.18.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:12cd
    2606:4700:3032::ac43:b757
    Cloudflare
    Cloudflare (104.21.18.205, 172.67.183.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. vote-etherfi.cfd US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for vote-etherfi.cfd
    Domain
    vote-etherfi.cfd
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .cfd zone file, already registered
    Registered
    2026-08-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · vote-etherfi.cfd · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.48.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:9bbb
    2606:4700:3033::6815:30b6
    Cloudflare
    Cloudflare (104.21.48.182, 172.67.155.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. ether-fi.digital GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “ether-fi”
    Listed by MetaMaskAddress on DomainSpoof’s phishing-host listAddress on Spamhaus DROP
    DetailsHide details for ether-fi.digital
    Domain
    ether-fi.digital
    Match
    A domain containing “ether-fi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .digital zone file, already registered
    Registered
    2026-08-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ether-fi.digital · in the feed since 2026-10-27 05:34 UTC
    Address on DomainSpoof’s phishing-host list
    196.251.107.176 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ether-fi.digital resolved to it 2026-11-04 23:40 UTC
    Address on Spamhaus DROP
    196.251.107.176 is on Spamhaus DROP · ether-fi.digital resolved to it 2026-11-04 23:40 UTC
    Addresses
    196.251.107.176 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. etherfi.news US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for etherfi.news
    Domain
    etherfi.news
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .news zone file, already registered
    Registered
    2026-08-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi.news · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.9.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:a082
    2606:4700:3036::6815:98b
    Cloudflare
    Cloudflare (104.21.9.139, 172.67.160.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. etherfi-vote.info US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for etherfi-vote.info
    Domain
    etherfi-vote.info
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-08-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-vote.info · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.15.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:fe4
    2606:4700:3035::ac43:d029
    Cloudflare
    Cloudflare (104.21.15.228, 172.67.208.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. proposals-etherfi.info US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for proposals-etherfi.info
    Domain
    proposals-etherfi.info
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-08-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · proposals-etherfi.info · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.41.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:296f
    2606:4700:3037::ac43:a471
    Cloudflare
    Cloudflare (104.21.41.111, 172.67.164.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. vote-etherfi.events US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for vote-etherfi.events
    Domain
    vote-etherfi.events
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .events zone file, already registered
    Registered
    2026-08-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · vote-etherfi.events · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.79.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:4f4f
    2606:4700:3037::ac43:a95b
    Cloudflare
    Cloudflare (104.21.79.79, 172.67.169.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. voters-etherfi.info US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskReported by PhishDestroyCloudflare
    DetailsHide details for voters-etherfi.info
    Domain
    voters-etherfi.info
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-08-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · voters-etherfi.info · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · voters-etherfi.info · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.19.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:b939
    2606:4700:3034::6815:132e
    Cloudflare
    Cloudflare (104.21.19.46, 172.67.185.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. ether-fi.pro GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “ether-fi”
    Listed by MetaMaskAddress on DomainSpoof’s phishing-host listAddress on Spamhaus DROP
    DetailsHide details for ether-fi.pro
    Domain
    ether-fi.pro
    Match
    A domain containing “ether-fi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-08-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ether-fi.pro · in the feed since 2026-10-27 05:34 UTC
    Address on DomainSpoof’s phishing-host list
    192.162.199.139 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ether-fi.pro resolved to it 2026-11-04 23:40 UTC
    Address on Spamhaus DROP
    192.162.199.139 is on Spamhaus DROP · ether-fi.pro resolved to it 2026-11-04 23:40 UTC
    Addresses
    192.162.199.139 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. ether-fi.sbs GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “ether-fi”
    Listed by MetaMaskAddress on DomainSpoof’s phishing-host listAddress on Spamhaus DROP
    DetailsHide details for ether-fi.sbs
    Domain
    ether-fi.sbs
    Match
    A domain containing “ether-fi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-08-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ether-fi.sbs · in the feed since 2026-10-27 05:34 UTC
    Address on DomainSpoof’s phishing-host list
    192.162.199.139 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ether-fi.sbs resolved to it 2026-11-04 23:40 UTC
    Address on Spamhaus DROP
    192.162.199.139 is on Spamhaus DROP · ether-fi.sbs resolved to it 2026-11-04 23:40 UTC
    Addresses
    192.162.199.139 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. etherfi-treasury.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfi-treasury.xyz
    Domain
    etherfi-treasury.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-30 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-treasury.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.37.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:258b
    2606:4700:3035::ac43:d127
    Cloudflare
    Cloudflare (104.21.37.139, 172.67.209.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. vote-etherfi.cloud GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “etherfi”
    Listed by MetaMaskAddress on DomainSpoof’s phishing-host listAddress on Spamhaus DROP
    DetailsHide details for vote-etherfi.cloud
    Domain
    vote-etherfi.cloud
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-07-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · vote-etherfi.cloud · in the feed since 2026-10-27 05:34 UTC
    Address on DomainSpoof’s phishing-host list
    192.162.199.139 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vote-etherfi.cloud resolved to it 2026-11-04 23:40 UTC
    Address on Spamhaus DROP
    192.162.199.139 is on Spamhaus DROP · vote-etherfi.cloud resolved to it 2026-11-04 23:40 UTC
    Addresses
    192.162.199.139 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. vote-etherfi.sbs GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “etherfi”
    Listed by MetaMaskAddress on DomainSpoof’s phishing-host listAddress on Spamhaus DROP
    DetailsHide details for vote-etherfi.sbs
    Domain
    vote-etherfi.sbs
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-07-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · vote-etherfi.sbs · in the feed since 2026-10-27 05:34 UTC
    Address on DomainSpoof’s phishing-host list
    192.162.199.139 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vote-etherfi.sbs resolved to it 2026-11-04 23:40 UTC
    Address on Spamhaus DROP
    192.162.199.139 is on Spamhaus DROP · vote-etherfi.sbs resolved to it 2026-11-04 23:40 UTC
    Addresses
    192.162.199.139 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. etherfi-proposal.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfi-proposal.xyz
    Domain
    etherfi-proposal.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-28 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-proposal.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.51.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:336f
    2606:4700:3032::ac43:b380
    Cloudflare
    Cloudflare (104.21.51.111, 172.67.179.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. proposal-ethfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for proposal-ethfi.xyz
    Domain
    proposal-ethfi.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-28 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · proposal-ethfi.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.56.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:38d8
    2606:4700:3037::ac43:9c09
    Cloudflare
    Cloudflare (104.21.56.216, 172.67.156.9): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. ethfi-proposal.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for ethfi-proposal.xyz
    Domain
    ethfi-proposal.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-23 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-proposal.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.44.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:2cc8
    2606:4700:3036::ac43:cba9
    Cloudflare
    Cloudflare (104.21.44.200, 172.67.203.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. governance-ethfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for governance-ethfi.xyz
    Domain
    governance-ethfi.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · governance-ethfi.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.63.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:8fb2
    2606:4700:3035::6815:3f2e
    Cloudflare
    Cloudflare (104.21.63.46, 172.67.143.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. ethfi-treasury.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for ethfi-treasury.xyz
    Domain
    ethfi-treasury.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-19 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-treasury.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.70.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:4678
    2606:4700:3035::ac43:df64
    Cloudflare
    Cloudflare (104.21.70.120, 172.67.223.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. treasury-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for treasury-etherfi.xyz
    Domain
    treasury-etherfi.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-17 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · treasury-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.6.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:86bb
    2606:4700:3036::6815:66b
    Cloudflare
    Cloudflare (104.21.6.107, 172.67.134.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. etherfi.shop US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfi.shop
    Domain
    etherfi.shop
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .shop zone file, already registered
    Registered
    2026-07-07 · Dynadot Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi.shop · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.51.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:b681
    2606:4700:3035::6815:339f
    Cloudflare
    Cloudflare (104.21.51.159, 172.67.182.129): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. etherfi-voting.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfi-voting.xyz
    Domain
    etherfi-voting.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-voting.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.51.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:b0ec
    2606:4700:3035::6815:3342
    Cloudflare
    Cloudflare (104.21.51.66, 172.67.176.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. etherfi.techContains “etherfi”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for etherfi.tech
    Domain
    etherfi.tech
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2026-06-17 · Cloudflare, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi.tech · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. etherfi-registration.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfi-registration.xyz
    Domain
    etherfi-registration.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-registration.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.8.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:83c
    2606:4700:3037::ac43:8a9b
    Cloudflare
    Cloudflare (104.21.8.60, 172.67.138.155): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. etherfi.company US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfi.company
    Domain
    etherfi.company
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .company zone file, already registered
    Registered
    2026-06-15 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi.company · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.87.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:8f04
    2606:4700:3037::6815:5771
    Cloudflare
    Cloudflare (104.21.87.113, 172.67.143.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. voting-ethfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskReported by PhishDestroyCloudflare
    DetailsHide details for voting-ethfi.app
    Domain
    voting-ethfi.app
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-06-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · voting-ethfi.app · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · voting-ethfi.app · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.81.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:5126
    2606:4700:3037::ac43:bc29
    Cloudflare
    Cloudflare (104.21.81.38, 172.67.188.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. vote-ethfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskReported by PhishDestroyCloudflare
    DetailsHide details for vote-ethfi.app
    Domain
    vote-ethfi.app
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-06-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · vote-ethfi.app · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · vote-ethfi.app · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.25.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:197a
    2606:4700:3033::ac43:8638
    Cloudflare
    Cloudflare (104.21.25.122, 172.67.134.56): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. votes-ethfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for votes-ethfi.app
    Domain
    votes-ethfi.app
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-06-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · votes-ethfi.app · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.96.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:b330
    2606:4700:3037::6815:6073
    Cloudflare
    Cloudflare (104.21.96.115, 172.67.179.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. portal-etherfi.xyzContains “etherfi”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for portal-etherfi.xyz
    Domain
    portal-etherfi.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · portal-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. join-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for join-etherfi.xyz
    Domain
    join-etherfi.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-04 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · join-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.66.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:4206
    2606:4700:3037::ac43:c588
    Cloudflare
    Cloudflare (104.21.66.6, 172.67.197.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. summerpass-ethfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for summerpass-ethfi.app
    Domain
    summerpass-ethfi.app
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-06-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · summerpass-ethfi.app · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.84.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:c524
    2606:4700:3034::6815:54d1
    Cloudflare
    Cloudflare (104.21.84.209, 172.67.197.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. enter-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for enter-etherfi.xyz
    Domain
    enter-etherfi.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-03 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · enter-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.68.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:4466
    2606:4700:3031::ac43:c1e6
    Cloudflare
    Cloudflare (104.21.68.102, 172.67.193.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. reallocations-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for reallocations-etherfi.xyz
    Domain
    reallocations-etherfi.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-03 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · reallocations-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.1.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.208 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:81d0
    2606:4700:3034::6815:1ba
    Cloudflare
    Cloudflare (104.21.1.186, 172.67.129.208): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. ethfi-enter.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for ethfi-enter.xyz
    Domain
    ethfi-enter.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-27 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-enter.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.20.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:c0ee
    2606:4700:3034::6815:1487
    Cloudflare
    Cloudflare (104.21.20.135, 172.67.192.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. etherfi-s5-vote.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfi-s5-vote.xyz
    Domain
    etherfi-s5-vote.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-24 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-s5-vote.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.58.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:cc7f
    2606:4700:3036::6815:3a94
    Cloudflare
    Cloudflare (104.21.58.148, 172.67.204.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. allocations-s5-ethfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for allocations-s5-ethfi.xyz
    Domain
    allocations-s5-ethfi.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · allocations-s5-ethfi.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.42.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:2ac7
    2606:4700:3037::ac43:a591
    Cloudflare
    Cloudflare (104.21.42.199, 172.67.165.145): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. etherfi-s5-distribution.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfi-s5-distribution.xyz
    Domain
    etherfi-s5-distribution.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-s5-distribution.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.68.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:44e5
    2606:4700:3036::ac43:c781
    Cloudflare
    Cloudflare (104.21.68.229, 172.67.199.129): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. etherfi-s5-allocations.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfi-s5-allocations.xyz
    Domain
    etherfi-s5-allocations.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-21 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-s5-allocations.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.75.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:4b2b
    2606:4700:3037::ac43:d552
    Cloudflare
    Cloudflare (104.21.75.43, 172.67.213.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. etherfi-claims.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfi-claims.xyz
    Domain
    etherfi-claims.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-20 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-claims.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.28.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:1ca3
    2606:4700:3035::ac43:aaef
    Cloudflare
    Cloudflare (104.21.28.163, 172.67.170.239): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. etherfi-allocations.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for etherfi-allocations.xyz
    Domain
    etherfi-allocations.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · etherfi-allocations.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.94.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:a84d
    2606:4700:3035::6815:5e86
    Cloudflare
    Cloudflare (104.21.94.134, 172.67.168.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. ethfi-allocations.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for ethfi-allocations.xyz
    Domain
    ethfi-allocations.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-allocations.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.85.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:d3c2
    2606:4700:3035::6815:55df
    Cloudflare
    Cloudflare (104.21.85.223, 172.67.211.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. ethfi-s5-allocations.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for ethfi-s5-allocations.xyz
    Domain
    ethfi-s5-allocations.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-s5-allocations.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.0.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:ba28
    2606:4700:3037::6815:99
    Cloudflare
    Cloudflare (104.21.0.153, 172.67.186.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. ethfi-s5-distribution.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for ethfi-s5-distribution.xyz
    Domain
    ethfi-s5-distribution.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-s5-distribution.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.63.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:ac5e
    2606:4700:3033::6815:3fe5
    Cloudflare
    Cloudflare (104.21.63.229, 172.67.172.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. ethfi-s5-vote.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for ethfi-s5-vote.xyz
    Domain
    ethfi-s5-vote.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · ethfi-s5-vote.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.43.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:2b0b
    2606:4700:3037::ac43:d7b2
    Cloudflare
    Cloudflare (104.21.43.11, 172.67.215.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. vote-s5-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskReported by PhishDestroyCloudflare
    DetailsHide details for vote-s5-etherfi.xyz
    Domain
    vote-s5-etherfi.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-07 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · vote-s5-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · vote-s5-etherfi.xyz · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.67.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:43c5
    2606:4700:3031::ac43:b425
    Cloudflare
    Cloudflare (104.21.67.197, 172.67.180.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. etherfi-club.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Reported by PhishDestroyCloudflare
    DetailsHide details for etherfi-club.app
    Domain
    etherfi-club.app
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-04-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · etherfi-club.app · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.41.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:2983
    2606:4700:3037::ac43:935e
    Cloudflare
    Cloudflare (104.21.41.131, 172.67.147.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. earn-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Reported by PhishDestroyCloudflare
    DetailsHide details for earn-etherfi.xyz
    Domain
    earn-etherfi.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-03-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · earn-etherfi.xyz · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.36.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:2495
    2606:4700:3033::ac43:c31f
    Cloudflare
    Cloudflare (104.21.36.149, 172.67.195.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. enter-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Reported by PhishDestroyCloudflare
    DetailsHide details for enter-etherfi.app
    Domain
    enter-etherfi.app
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-03-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · enter-etherfi.app · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.32.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:9cd2
    2606:4700:3036::6815:20ee
    Cloudflare
    Cloudflare (104.21.32.238, 172.67.156.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. season5-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Reported by PhishDestroyCloudflare
    DetailsHide details for season5-etherfi.xyz
    Domain
    season5-etherfi.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-03-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · season5-etherfi.xyz · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.53.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:3526
    2606:4700:3037::ac43:d0ba
    Cloudflare
    Cloudflare (104.21.53.38, 172.67.208.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. s5-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Reported by PhishDestroyCloudflare
    DetailsHide details for s5-etherfi.app
    Domain
    s5-etherfi.app
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-03-10 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · s5-etherfi.app · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.23.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:1756
    2606:4700:3036::ac43:d1dc
    Cloudflare
    Cloudflare (104.21.23.86, 172.67.209.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. vote-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Reported by PhishDestroyCloudflare
    DetailsHide details for vote-etherfi.app
    Domain
    vote-etherfi.app
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-03-10 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · vote-etherfi.app · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.22.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:1683
    2606:4700:3032::ac43:cd14
    Cloudflare
    Cloudflare (104.21.22.131, 172.67.205.20): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. votes-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Reported by PhishDestroyCloudflare
    DetailsHide details for votes-etherfi.app
    Domain
    votes-etherfi.app
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-03-10 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · votes-etherfi.app · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.88.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:58bf
    2606:4700:3031::ac43:9830
    Cloudflare
    Cloudflare (104.21.88.191, 172.67.152.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. snapshot-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Reported by PhishDestroyCloudflare
    DetailsHide details for snapshot-etherfi.app
    Domain
    snapshot-etherfi.app
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-03-09 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · snapshot-etherfi.app · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.60.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:c915
    2606:4700:3037::6815:3cc7
    Cloudflare
    Cloudflare (104.21.60.199, 172.67.201.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. voting-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    Listed by MetaMaskCloudflare
    DetailsHide details for voting-etherfi.app
    Domain
    voting-etherfi.app
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-01-01 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · voting-etherfi.app · in the feed since 2026-11-01 11:44 UTC
    Addresses
    104.21.68.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:443a
    2606:4700:3037::ac43:bbc0
    Cloudflare
    Cloudflare (104.21.68.58, 172.67.187.192): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. earn-etherfi.appContains “etherfi”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for earn-etherfi.app
    Domain
    earn-etherfi.app
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2025-12-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · earn-etherfi.app · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. etherfi-giveaway.app AU · AS133618 · Trellian Pty. LimitedContains “etherfi”
    Reported by PhishDestroyParking page · Above.comMX present
    DetailsHide details for etherfi-giveaway.app
    Domain
    etherfi-giveaway.app
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2025-11-03 · Dynadot LLC.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · etherfi-giveaway.app · in the feed since 2026-11-03 21:22 UTC
    Addresses
    103.224.212.141 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates etherfi-giveaway.app to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.141): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. stake-etherfi.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “etherfi”
    PhishDestroy CommunitySuspicious · mediumParking page · Afternic
    DetailsHide details for stake-etherfi.xyz
    Domain
    stake-etherfi.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-10-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates stake-etherfi.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. proposals-etherfi.top US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”
    PhishDestroy CommunitySuspicious · highCloudflare
    DetailsHide details for proposals-etherfi.top
    Domain
    proposals-etherfi.top
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-09-23 · Eranet International Limited
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    104.21.88.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:5832
    2606:4700:3031::ac43:ad08
    Cloudflare
    Cloudflare (104.21.88.50, 172.67.173.8): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. etherfi-registry.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “etherfi”
    PhishDestroy CommunitySuspicious · mediumParking page · Afternic
    DetailsHide details for etherfi-registry.xyz
    Domain
    etherfi-registry.xyz
    Match
    A domain containing “etherfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates etherfi-registry.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. ethfi-aidrop.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “ethfi”
    PhishDestroy CommunitySuspicious · mediumParking page · Afternic
    DetailsHide details for ethfi-aidrop.xyz
    Domain
    ethfi-aidrop.xyz
    Match
    A domain containing “ethfi”, one of the names we match for ether.fi
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-02 · GMO Internet Group, Inc. d/b/a Onamae.com
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates ethfi-aidrop.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC

More brands in Crypto & web3

All brands →