ether.fi
Registered lookalikes
Spellings of ether.fi registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
9 of the 20 are listed by a source or resolve to a listed address, checked hourly.
- rewards-etherfi.click US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · the name with an added wordListed by MetaMaskCloudflare
DetailsHide details for rewards-etherfi.click
- Domain
- rewards-etherfi.click
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .click zone file, already registered
- Registered
- 2026-10-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · rewards-etherfi.click · in the feed since 2026-10-31 05:42 UTC
- Addresses
- 104.21.61.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.213.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:d5792606:4700:3037::6815:3dc3
- Cloudflare
- Cloudflare (104.21.61.195, 172.67.213.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rewards-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · the name with an added wordListed by MetaMaskCloudflare
DetailsHide details for rewards-etherfi.icu
- Domain
- rewards-etherfi.icu
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-10-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · rewards-etherfi.icu · in the feed since 2026-10-31 05:42 UTC
- Addresses
- 104.21.46.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.139.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:2e8c2606:4700:3035::ac43:8b34
- Cloudflare
- Cloudflare (104.21.46.140, 172.67.139.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etehrfi.trade US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · two letters swappedListed by MetaMaskCloudflare
DetailsHide details for etehrfi.trade
- Domain
- etehrfi.trade
- Spelling
- Spelled like ether.fi with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .trade zone file, already registered
- Registered
- 2026-10-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etehrfi.trade · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.65.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.167.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:41cf2606:4700:3037::ac43:a70e
- Cloudflare
- Cloudflare (104.21.65.207, 172.67.167.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etehrfi.pro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · two letters swappedListed by MetaMaskCloudflare
DetailsHide details for etehrfi.pro
- Domain
- etehrfi.pro
- Spelling
- Spelled like ether.fi with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-10-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etehrfi.pro · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.64.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.173.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:40092606:4700:3036::ac43:adbc
- Cloudflare
- Cloudflare (104.21.64.9, 172.67.173.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherr-fi.info SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of ether.fi · a doubled letter3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
DetailsHide details for etherr-fi.info
- Domain
- etherr-fi.info
- Spelling
- Spelled like ether.fi with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-07-18 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (etherr-fi.info resolved to it 2026-11-04 23:40 UTC), 172.232.24.235 (etherr-fi.info resolved to it 2026-11-04 23:40 UTC), 172.234.25.42 (etherr-fi.info resolved to it 2026-11-04 23:40 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfii.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · a doubled letterListed by MetaMaskCloudflare
DetailsHide details for etherfii.xyz
- Domain
- etherfii.xyz
- Spelling
- Spelled like ether.fi with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-08 · Global Domain Group LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfii.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.81.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.190.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:519f2606:4700:3037::ac43:be03
- Cloudflare
- Cloudflare (104.21.81.159, 172.67.190.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- governance-ether.fi FR · AS16276 · OVH OVH SASLookalike of ether.fi · the name with the word “governance”Listed by MetaMaskParking page · emailverification.info suspended-domain page
DetailsHide details for governance-ether.fi
- Domain
- governance-ether.fi
- Spelling
- The name of ether.fi with the word “governance”
- First found
- 2026-11-04 · the day the daily DNS check first found it registered
- Registered
- 2026-06-03
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · governance-ether.fi · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 54.38.220.85 · France · AS16276 OVH OVH SAS · emailverification.info suspended-domain page (parking page)
- Parking page · emailverification.info suspended-domain page
- The registry delegates governance-ether.fi to emailverification.info suspended-domain page’s nameservers, which answer for it. emailverification.info suspended-domain page (54.38.220.85): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-rewards.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · the name with an added wordListed by MetaMaskCloudflare
DetailsHide details for ethfi-rewards.xyz
- Domain
- ethfi-rewards.xyz
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-rewards.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.9.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.161.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:9af2606:4700:3037::ac43:a123
- Cloudflare
- Cloudflare (104.21.9.175, 172.67.161.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-s5-rewards.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of ether.fi · the name with an added wordListed by MetaMaskCloudflare
DetailsHide details for ethfi-s5-rewards.xyz
- Domain
- ethfi-s5-rewards.xyz
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-s5-rewards.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.20.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.191.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:bf542606:4700:3035::6815:142b
- Cloudflare
- Cloudflare (104.21.20.43, 172.67.191.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- claimetherfi.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · the name with an added wordPhishDestroy CommunitySuspicious · mediumParking page · Afternic
DetailsHide details for claimetherfi.xyz
- Domain
- claimetherfi.xyz
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-02 · GMO Internet Group, Inc. d/b/a Onamae.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates claimetherfi.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherrfi.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · a doubled letterParking page · Afternic
DetailsHide details for etherrfi.xyz
- Domain
- etherrfi.xyz
- Spelling
- Spelled like ether.fi with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-02 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates etherrfi.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethrefi.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · two letters swappedPhishDestroy CommunitySuspicious · mediumParking page · Afternic
DetailsHide details for ethrefi.xyz
- Domain
- ethrefi.xyz
- Spelling
- Spelled like ether.fi with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-02 · GMO Internet Group, Inc. d/b/a Onamae.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates ethrefi.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfitrack.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · the name with an added wordParking page · Afternic
DetailsHide details for ethfitrack.xyz
- Domain
- ethfitrack.xyz
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-15 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates ethfitrack.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- trackethfi.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · the name with an added wordParking page · Afternic
DetailsHide details for trackethfi.xyz
- Domain
- trackethfi.xyz
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-15 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates trackethfi.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfibank.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · the name with an added wordParking page · Afternic
DetailsHide details for ethfibank.xyz
- Domain
- ethfibank.xyz
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-13 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates ethfibank.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfipay.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of ether.fi · the name with an added wordParking page · Afternic
DetailsHide details for ethfipay.xyz
- Domain
- ethfipay.xyz
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-13 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates ethfipay.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherffi.xyz DE · AS47846 · SEDO-AS SEDO GmbHLookalike of ether.fi · a doubled letterParking page · SedoMX present
DetailsHide details for etherffi.xyz
- Domain
- etherffi.xyz
- Spelling
- Spelled like ether.fi with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-08 · NameSilo, LLC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-claim.infoLookalike of ether.fi · the name with an added wordPhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for etherfi-claim.info
- Domain
- etherfi-claim.info
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2025-12-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethficard.xyz AU · AS154653 · ParkLogic Pty LtdLookalike of ether.fi · the name with an added wordParking page · ParkLogicMX present
DetailsHide details for ethficard.xyz
- Domain
- ethficard.xyz
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-09-29 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 162.4.84.215 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates ethficard.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.215): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx156.hostedmxserver.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- rewards-ethfi.xyz AU · AS154653 · ParkLogic Pty LtdLookalike of ether.fi · the name with an added wordParking page · ParkLogicMX present
DetailsHide details for rewards-ethfi.xyz
- Domain
- rewards-ethfi.xyz
- Spelling
- The name of ether.fi with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-09-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 162.4.84.215 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates rewards-ethfi.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.215): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx156.hostedmxserver.com
- Daily check
- Ended 2026-11-04 22:41 UTC
New registrations using the name
New domains with ether.fi's name in them, from registry zone files (ICANN CZDS), checked daily like the lookalikes above. We matched them by name alone; resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
100 of 119 shown: listed ones first, then the newest registrations.
- app-etherfi.top US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for app-etherfi.top
- Domain
- app-etherfi.top
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · app-etherfi.top · in the feed since 2026-11-04 11:50 UTC
- Addresses
- 104.21.5.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.154.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:9aab2606:4700:3036::6815:5be
- Cloudflare
- Cloudflare (104.21.5.190, 172.67.154.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi.top GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “etherfi”Listed by MetaMaskAddress on Spamhaus DROP
DetailsHide details for etherfi.top
- Domain
- etherfi.top
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi.top · in the feed since 2026-11-04 11:50 UTC
- Address on Spamhaus DROP
- 192.162.199.82 is on Spamhaus DROP · etherfi.top resolved to it 2026-11-04 23:40 UTC
- Addresses
- 192.162.199.82 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
- Daily check
- Ended 2026-11-04 22:41 UTC
- s5-etherfi.top US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for s5-etherfi.top
- Domain
- s5-etherfi.top
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · s5-etherfi.top · in the feed since 2026-11-04 11:50 UTC
- Addresses
- 104.21.69.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.206.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:45512606:4700:3036::ac43:ce83
- Cloudflare
- Cloudflare (104.21.69.81, 172.67.206.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- app-etherfi.click US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for app-etherfi.click
- Domain
- app-etherfi.click
- Match
- A new registration containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-03 · the day the .click zone file first listed it as a new registration
- Registered
- 2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · app-etherfi.click · in the feed since 2026-11-04 11:50 UTC
- Addresses
- 104.21.81.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.161.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:518f2606:4700:3033::ac43:a176
- Cloudflare
- Cloudflare (104.21.81.143, 172.67.161.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- app-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for app-etherfi.icu
- Domain
- app-etherfi.icu
- Match
- A new registration containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-03 · the day the .icu zone file first listed it as a new registration
- Registered
- 2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · app-etherfi.icu · in the feed since 2026-11-04 11:50 UTC
- Addresses
- 104.21.17.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.177.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:119a2606:4700:3034::ac43:b10e
- Cloudflare
- Cloudflare (104.21.17.154, 172.67.177.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- s5-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for s5-etherfi.icu
- Domain
- s5-etherfi.icu
- Match
- A new registration containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-03 · the day the .icu zone file first listed it as a new registration
- Registered
- 2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · s5-etherfi.icu · in the feed since 2026-11-04 11:50 UTC
- Addresses
- 104.21.8.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.156.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:84d2606:4700:3036::ac43:9cef
- Cloudflare
- Cloudflare (104.21.8.77, 172.67.156.239): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- season5-etherfi.click US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for season5-etherfi.click
- Domain
- season5-etherfi.click
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .click zone file, already registered
- Registered
- 2026-10-31 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · season5-etherfi.click · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · season5-etherfi.click · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.43.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.218.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:2b252606:4700:3034::ac43:da02
- Cloudflare
- Cloudflare (104.21.43.37, 172.67.218.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- season5-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for season5-etherfi.icu
- Domain
- season5-etherfi.icu
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-10-31 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · season5-etherfi.icu · in the feed since 2026-11-01 11:44 UTC
- Addresses
- 104.21.38.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.218.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:261b2606:4700:3037::ac43:da21
- Cloudflare
- Cloudflare (104.21.38.27, 172.67.218.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ether-fi.helpContains “ether-fi”Listed by MetaMaskMX present
DetailsHide details for ether-fi.help
- Domain
- ether-fi.help
- Match
- A domain containing “ether-fi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .help zone file, already registered
- Registered
- 2026-10-28 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ether-fi.help · in the feed since 2026-10-30 11:39 UTC
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- season5-proposal-etherfi.click US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for season5-proposal-etherfi.click
- Domain
- season5-proposal-etherfi.click
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .click zone file, already registered
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · season5-proposal-etherfi.click · in the feed since 2026-10-29 11:37 UTC
- Addresses
- 104.21.83.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.181.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:53d12606:4700:3036::ac43:b5f2
- Cloudflare
- Cloudflare (104.21.83.209, 172.67.181.242): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- season5-proposal-etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for season5-proposal-etherfi.icu
- Domain
- season5-proposal-etherfi.icu
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · season5-proposal-etherfi.icu · in the feed since 2026-10-30 11:39 UTC
- Addresses
- 104.21.61.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.216.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::ac43:d8f92606:4700:3037::6815:3ded
- Cloudflare
- Cloudflare (104.21.61.237, 172.67.216.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- season5-proposal-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for season5-proposal-etherfi.xyz
- Domain
- season5-proposal-etherfi.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · season5-proposal-etherfi.xyz · in the feed since 2026-10-30 11:39 UTC
- Addresses
- 104.21.25.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.223.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:19392606:4700:3033::ac43:df03
- Cloudflare
- Cloudflare (104.21.25.57, 172.67.223.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- gov-etherfi.finance US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for gov-etherfi.finance
- Domain
- gov-etherfi.finance
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .finance zone file, already registered
- Registered
- 2026-09-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · gov-etherfi.finance · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.2.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.128.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:80e02606:4700:3034::6815:248
- Cloudflare
- Cloudflare (104.21.2.72, 172.67.128.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-interest.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
DetailsHide details for etherfi-interest.xyz
- Domain
- etherfi-interest.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-interest.xyz · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · etherfi-interest.xyz · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.34.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.161.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:a1432606:4700:3035::6815:2282
- Cloudflare
- Cloudflare (104.21.34.130, 172.67.161.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- proposal-ethfi.live US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for proposal-ethfi.live
- Domain
- proposal-ethfi.live
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-09-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · proposal-ethfi.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.86.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.138.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:56fb2606:4700:3034::ac43:8adc
- Cloudflare
- Cloudflare (104.21.86.251, 172.67.138.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-proposal.live US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for etherfi-proposal.live
- Domain
- etherfi-proposal.live
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-09-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-proposal.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.63.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.144.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:3f562606:4700:3037::ac43:9057
- Cloudflare
- Cloudflare (104.21.63.86, 172.67.144.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-proposal.live US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for ethfi-proposal.live
- Domain
- ethfi-proposal.live
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-09-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-proposal.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.59.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.179.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:b3c02606:4700:3032::6815:3b98
- Cloudflare
- Cloudflare (104.21.59.152, 172.67.179.192): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- governance-etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for governance-etherfi.pro
- Domain
- governance-etherfi.pro
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · governance-etherfi.pro · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.74.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.209.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:4afe2606:4700:3034::ac43:d14e
- Cloudflare
- Cloudflare (104.21.74.254, 172.67.209.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- distributions-ethfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for distributions-ethfi.xyz
- Domain
- distributions-ethfi.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · distributions-ethfi.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.15.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:a5572606:4700:3032::6815:ff7
- Cloudflare
- Cloudflare (104.21.15.247, 172.67.165.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- q3-etherfi.info US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for q3-etherfi.info
- Domain
- q3-etherfi.info
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-09-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · q3-etherfi.info · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.17.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.223.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:df022606:4700:3036::6815:1142
- Cloudflare
- Cloudflare (104.21.17.66, 172.67.223.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-dashboard.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
DetailsHide details for ethfi-dashboard.xyz
- Domain
- ethfi-dashboard.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-dashboard.xyz · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ethfi-dashboard.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.31.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.180.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:1fe82606:4700:3032::ac43:b4bd
- Cloudflare
- Cloudflare (104.21.31.232, 172.67.180.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-proposal.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for ethfi-proposal.icu
- Domain
- ethfi-proposal.icu
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-09-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-proposal.icu · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.3.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.131.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:3ea2606:4700:3034::ac43:8352
- Cloudflare
- Cloudflare (104.21.3.234, 172.67.131.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-governance.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for etherfi-governance.xyz
- Domain
- etherfi-governance.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-governance.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.54.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.136.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:88622606:4700:3034::6815:3649
- Cloudflare
- Cloudflare (104.21.54.73, 172.67.136.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vote-etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
DetailsHide details for vote-etherfi.pro
- Domain
- vote-etherfi.pro
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-08-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · vote-etherfi.pro · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · vote-etherfi.pro · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.37.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.210.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:d2c32606:4700:3037::6815:25a9
- Cloudflare
- Cloudflare (104.21.37.169, 172.67.210.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
DetailsHide details for etherfi.pro
- Domain
- etherfi.pro
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-08-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi.pro · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · etherfi.pro · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.31.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.177.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:1f912606:4700:3037::ac43:b1c8
- Cloudflare
- Cloudflare (104.21.31.145, 172.67.177.200): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- allocations-ethfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
DetailsHide details for allocations-ethfi.icu
- Domain
- allocations-ethfi.icu
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-08-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · allocations-ethfi.icu · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · allocations-ethfi.icu · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.50.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.163.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:32802606:4700:3037::ac43:a33a
- Cloudflare
- Cloudflare (104.21.50.128, 172.67.163.58): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi.digital US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for etherfi.digital
- Domain
- etherfi.digital
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .digital zone file, already registered
- Registered
- 2026-08-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi.digital · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.91.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.216.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:5b732606:4700:3032::ac43:d8b4
- Cloudflare
- Cloudflare (104.21.91.115, 172.67.216.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for etherfi.icu
- Domain
- etherfi.icu
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-08-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi.icu · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.92.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.192.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:5c772606:4700:3037::ac43:c0fd
- Cloudflare
- Cloudflare (104.21.92.119, 172.67.192.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi.live US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for etherfi.live
- Domain
- etherfi.live
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.12.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.131.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:83e82606:4700:3034::6815:c1b
- Cloudflare
- Cloudflare (104.21.12.27, 172.67.131.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- gov-etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for gov-etherfi.pro
- Domain
- gov-etherfi.pro
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-08-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · gov-etherfi.pro · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.71.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.141.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:8d3f2606:4700:3036::6815:4703
- Cloudflare
- Cloudflare (104.21.71.3, 172.67.141.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- voting-etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for voting-etherfi.pro
- Domain
- voting-etherfi.pro
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-08-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · voting-etherfi.pro · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.31.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:1f5b2606:4700:3037::ac43:b029
- Cloudflare
- Cloudflare (104.21.31.91, 172.67.176.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- distribution-ethfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for distribution-ethfi.icu
- Domain
- distribution-ethfi.icu
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-08-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · distribution-ethfi.icu · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.72.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.154.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:9a8e2606:4700:3035::6815:48c4
- Cloudflare
- Cloudflare (104.21.72.196, 172.67.154.142): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- voting-ethfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for voting-ethfi.icu
- Domain
- voting-ethfi.icu
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-08-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · voting-ethfi.icu · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.15.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.161.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:f582606:4700:3035::ac43:a1fe
- Cloudflare
- Cloudflare (104.21.15.88, 172.67.161.254): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-distribution.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for etherfi-distribution.xyz
- Domain
- etherfi-distribution.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-distribution.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.83.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.184.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:53fc2606:4700:3035::ac43:b803
- Cloudflare
- Cloudflare (104.21.83.252, 172.67.184.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-proposal.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for etherfi-proposal.icu
- Domain
- etherfi-proposal.icu
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-proposal.icu · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.69.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.210.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:d2902606:4700:3035::6815:45aa
- Cloudflare
- Cloudflare (104.21.69.170, 172.67.210.144): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-distribution.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for ethfi-distribution.xyz
- Domain
- ethfi-distribution.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-distribution.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.75.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.180.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:b41d2606:4700:3034::6815:4bb8
- Cloudflare
- Cloudflare (104.21.75.184, 172.67.180.29): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- proposal-etherfi.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for proposal-etherfi.pro
- Domain
- proposal-etherfi.pro
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · proposal-etherfi.pro · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.76.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.195.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:c3bf2606:4700:3035::6815:4c89
- Cloudflare
- Cloudflare (104.21.76.137, 172.67.195.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- reallocation-ethfi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for reallocation-ethfi.icu
- Domain
- reallocation-ethfi.icu
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · reallocation-ethfi.icu · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.29.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.171.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:1d152606:4700:3037::ac43:ab43
- Cloudflare
- Cloudflare (104.21.29.21, 172.67.171.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vote-etherfi.digital US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for vote-etherfi.digital
- Domain
- vote-etherfi.digital
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .digital zone file, already registered
- Registered
- 2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · vote-etherfi.digital · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.29.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.148.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:1d592606:4700:3032::ac43:94b4
- Cloudflare
- Cloudflare (104.21.29.89, 172.67.148.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-reallocation.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for ethfi-reallocation.xyz
- Domain
- ethfi-reallocation.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-08-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-reallocation.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.25.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:86792606:4700:3036::6815:19bb
- Cloudflare
- Cloudflare (104.21.25.187, 172.67.134.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-reallocation.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for etherfi-reallocation.xyz
- Domain
- etherfi-reallocation.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-08-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-reallocation.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.78.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.222.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:4e8d2606:4700:3036::ac43:de6e
- Cloudflare
- Cloudflare (104.21.78.141, 172.67.222.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- governance-etherfi.news US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for governance-etherfi.news
- Domain
- governance-etherfi.news
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .news zone file, already registered
- Registered
- 2026-08-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · governance-etherfi.news · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.18.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.183.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:12cd2606:4700:3032::ac43:b757
- Cloudflare
- Cloudflare (104.21.18.205, 172.67.183.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vote-etherfi.cfd US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for vote-etherfi.cfd
- Domain
- vote-etherfi.cfd
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .cfd zone file, already registered
- Registered
- 2026-08-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · vote-etherfi.cfd · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.48.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.155.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:9bbb2606:4700:3033::6815:30b6
- Cloudflare
- Cloudflare (104.21.48.182, 172.67.155.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ether-fi.digital GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “ether-fi”Listed by MetaMaskAddress on DomainSpoof’s phishing-host listAddress on Spamhaus DROP
DetailsHide details for ether-fi.digital
- Domain
- ether-fi.digital
- Match
- A domain containing “ether-fi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .digital zone file, already registered
- Registered
- 2026-08-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ether-fi.digital · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 196.251.107.176 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ether-fi.digital resolved to it 2026-11-04 23:40 UTC
- Address on Spamhaus DROP
- 196.251.107.176 is on Spamhaus DROP · ether-fi.digital resolved to it 2026-11-04 23:40 UTC
- Addresses
- 196.251.107.176 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi.news US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for etherfi.news
- Domain
- etherfi.news
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .news zone file, already registered
- Registered
- 2026-08-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi.news · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.9.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.160.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:a0822606:4700:3036::6815:98b
- Cloudflare
- Cloudflare (104.21.9.139, 172.67.160.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-vote.info US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for etherfi-vote.info
- Domain
- etherfi-vote.info
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-08-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-vote.info · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.15.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:fe42606:4700:3035::ac43:d029
- Cloudflare
- Cloudflare (104.21.15.228, 172.67.208.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- proposals-etherfi.info US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for proposals-etherfi.info
- Domain
- proposals-etherfi.info
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-08-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · proposals-etherfi.info · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.41.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.164.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:296f2606:4700:3037::ac43:a471
- Cloudflare
- Cloudflare (104.21.41.111, 172.67.164.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vote-etherfi.events US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for vote-etherfi.events
- Domain
- vote-etherfi.events
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .events zone file, already registered
- Registered
- 2026-08-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · vote-etherfi.events · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.79.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.169.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:4f4f2606:4700:3037::ac43:a95b
- Cloudflare
- Cloudflare (104.21.79.79, 172.67.169.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- voters-etherfi.info US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for voters-etherfi.info
- Domain
- voters-etherfi.info
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-08-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · voters-etherfi.info · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · voters-etherfi.info · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.19.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.185.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:b9392606:4700:3034::6815:132e
- Cloudflare
- Cloudflare (104.21.19.46, 172.67.185.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ether-fi.pro GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “ether-fi”Listed by MetaMaskAddress on DomainSpoof’s phishing-host listAddress on Spamhaus DROP
DetailsHide details for ether-fi.pro
- Domain
- ether-fi.pro
- Match
- A domain containing “ether-fi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-08-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ether-fi.pro · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 192.162.199.139 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ether-fi.pro resolved to it 2026-11-04 23:40 UTC
- Address on Spamhaus DROP
- 192.162.199.139 is on Spamhaus DROP · ether-fi.pro resolved to it 2026-11-04 23:40 UTC
- Addresses
- 192.162.199.139 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
- Daily check
- Ended 2026-11-04 22:41 UTC
- ether-fi.sbs GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “ether-fi”Listed by MetaMaskAddress on DomainSpoof’s phishing-host listAddress on Spamhaus DROP
DetailsHide details for ether-fi.sbs
- Domain
- ether-fi.sbs
- Match
- A domain containing “ether-fi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-08-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ether-fi.sbs · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 192.162.199.139 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ether-fi.sbs resolved to it 2026-11-04 23:40 UTC
- Address on Spamhaus DROP
- 192.162.199.139 is on Spamhaus DROP · ether-fi.sbs resolved to it 2026-11-04 23:40 UTC
- Addresses
- 192.162.199.139 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-treasury.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for etherfi-treasury.xyz
- Domain
- etherfi-treasury.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-30 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-treasury.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.37.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.209.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:258b2606:4700:3035::ac43:d127
- Cloudflare
- Cloudflare (104.21.37.139, 172.67.209.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vote-etherfi.cloud GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “etherfi”Listed by MetaMaskAddress on DomainSpoof’s phishing-host listAddress on Spamhaus DROP
DetailsHide details for vote-etherfi.cloud
- Domain
- vote-etherfi.cloud
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-07-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · vote-etherfi.cloud · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 192.162.199.139 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vote-etherfi.cloud resolved to it 2026-11-04 23:40 UTC
- Address on Spamhaus DROP
- 192.162.199.139 is on Spamhaus DROP · vote-etherfi.cloud resolved to it 2026-11-04 23:40 UTC
- Addresses
- 192.162.199.139 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
- Daily check
- Ended 2026-11-04 22:41 UTC
- vote-etherfi.sbs GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Contains “etherfi”Listed by MetaMaskAddress on DomainSpoof’s phishing-host listAddress on Spamhaus DROP
DetailsHide details for vote-etherfi.sbs
- Domain
- vote-etherfi.sbs
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-07-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · vote-etherfi.sbs · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 192.162.199.139 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vote-etherfi.sbs resolved to it 2026-11-04 23:40 UTC
- Address on Spamhaus DROP
- 192.162.199.139 is on Spamhaus DROP · vote-etherfi.sbs resolved to it 2026-11-04 23:40 UTC
- Addresses
- 192.162.199.139 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-proposal.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for etherfi-proposal.xyz
- Domain
- etherfi-proposal.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-28 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-proposal.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.51.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.179.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:336f2606:4700:3032::ac43:b380
- Cloudflare
- Cloudflare (104.21.51.111, 172.67.179.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- proposal-ethfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for proposal-ethfi.xyz
- Domain
- proposal-ethfi.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-28 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · proposal-ethfi.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.56.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.156.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:38d82606:4700:3037::ac43:9c09
- Cloudflare
- Cloudflare (104.21.56.216, 172.67.156.9): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-proposal.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for ethfi-proposal.xyz
- Domain
- ethfi-proposal.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-23 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-proposal.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.44.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.203.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:2cc82606:4700:3036::ac43:cba9
- Cloudflare
- Cloudflare (104.21.44.200, 172.67.203.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- governance-ethfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for governance-ethfi.xyz
- Domain
- governance-ethfi.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · governance-ethfi.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.63.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.143.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:8fb22606:4700:3035::6815:3f2e
- Cloudflare
- Cloudflare (104.21.63.46, 172.67.143.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-treasury.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for ethfi-treasury.xyz
- Domain
- ethfi-treasury.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-19 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-treasury.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.70.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.223.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:46782606:4700:3035::ac43:df64
- Cloudflare
- Cloudflare (104.21.70.120, 172.67.223.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- treasury-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for treasury-etherfi.xyz
- Domain
- treasury-etherfi.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-17 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · treasury-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.6.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:86bb2606:4700:3036::6815:66b
- Cloudflare
- Cloudflare (104.21.6.107, 172.67.134.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi.shop US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for etherfi.shop
- Domain
- etherfi.shop
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .shop zone file, already registered
- Registered
- 2026-07-07 · Dynadot Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi.shop · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.51.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.182.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:b6812606:4700:3035::6815:339f
- Cloudflare
- Cloudflare (104.21.51.159, 172.67.182.129): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-voting.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for etherfi-voting.xyz
- Domain
- etherfi-voting.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-voting.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.51.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:b0ec2606:4700:3035::6815:3342
- Cloudflare
- Cloudflare (104.21.51.66, 172.67.176.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi.techContains “etherfi”Listed by MetaMaskNo address or mail server yet
DetailsHide details for etherfi.tech
- Domain
- etherfi.tech
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2026-06-17 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi.tech · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-registration.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for etherfi-registration.xyz
- Domain
- etherfi-registration.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-registration.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.8.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.138.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:83c2606:4700:3037::ac43:8a9b
- Cloudflare
- Cloudflare (104.21.8.60, 172.67.138.155): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi.company US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for etherfi.company
- Domain
- etherfi.company
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .company zone file, already registered
- Registered
- 2026-06-15 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi.company · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.87.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.143.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::ac43:8f042606:4700:3037::6815:5771
- Cloudflare
- Cloudflare (104.21.87.113, 172.67.143.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- voting-ethfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for voting-ethfi.app
- Domain
- voting-ethfi.app
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-06-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · voting-ethfi.app · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · voting-ethfi.app · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.81.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.188.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:51262606:4700:3037::ac43:bc29
- Cloudflare
- Cloudflare (104.21.81.38, 172.67.188.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vote-ethfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for vote-ethfi.app
- Domain
- vote-ethfi.app
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-06-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · vote-ethfi.app · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · vote-ethfi.app · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.25.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:197a2606:4700:3033::ac43:8638
- Cloudflare
- Cloudflare (104.21.25.122, 172.67.134.56): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- votes-ethfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for votes-ethfi.app
- Domain
- votes-ethfi.app
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-06-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · votes-ethfi.app · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.96.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.179.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:b3302606:4700:3037::6815:6073
- Cloudflare
- Cloudflare (104.21.96.115, 172.67.179.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- portal-etherfi.xyzContains “etherfi”Listed by MetaMaskNo address or mail server yet
DetailsHide details for portal-etherfi.xyz
- Domain
- portal-etherfi.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · portal-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- join-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for join-etherfi.xyz
- Domain
- join-etherfi.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-04 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · join-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.66.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.197.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::6815:42062606:4700:3037::ac43:c588
- Cloudflare
- Cloudflare (104.21.66.6, 172.67.197.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- summerpass-ethfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for summerpass-ethfi.app
- Domain
- summerpass-ethfi.app
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-06-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · summerpass-ethfi.app · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.84.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.197.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:c5242606:4700:3034::6815:54d1
- Cloudflare
- Cloudflare (104.21.84.209, 172.67.197.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- enter-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for enter-etherfi.xyz
- Domain
- enter-etherfi.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-03 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · enter-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.68.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.193.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:44662606:4700:3031::ac43:c1e6
- Cloudflare
- Cloudflare (104.21.68.102, 172.67.193.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- reallocations-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for reallocations-etherfi.xyz
- Domain
- reallocations-etherfi.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-03 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · reallocations-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.1.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.129.208 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:81d02606:4700:3034::6815:1ba
- Cloudflare
- Cloudflare (104.21.1.186, 172.67.129.208): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-enter.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for ethfi-enter.xyz
- Domain
- ethfi-enter.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-27 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-enter.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.20.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.192.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:c0ee2606:4700:3034::6815:1487
- Cloudflare
- Cloudflare (104.21.20.135, 172.67.192.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-s5-vote.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for etherfi-s5-vote.xyz
- Domain
- etherfi-s5-vote.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-24 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-s5-vote.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.58.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.204.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:cc7f2606:4700:3036::6815:3a94
- Cloudflare
- Cloudflare (104.21.58.148, 172.67.204.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- allocations-s5-ethfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for allocations-s5-ethfi.xyz
- Domain
- allocations-s5-ethfi.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · allocations-s5-ethfi.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.42.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:2ac72606:4700:3037::ac43:a591
- Cloudflare
- Cloudflare (104.21.42.199, 172.67.165.145): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-s5-distribution.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for etherfi-s5-distribution.xyz
- Domain
- etherfi-s5-distribution.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-s5-distribution.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.68.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.199.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::6815:44e52606:4700:3036::ac43:c781
- Cloudflare
- Cloudflare (104.21.68.229, 172.67.199.129): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-s5-allocations.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for etherfi-s5-allocations.xyz
- Domain
- etherfi-s5-allocations.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-21 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-s5-allocations.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.75.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.213.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:4b2b2606:4700:3037::ac43:d552
- Cloudflare
- Cloudflare (104.21.75.43, 172.67.213.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-claims.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for etherfi-claims.xyz
- Domain
- etherfi-claims.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-20 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-claims.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.28.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.170.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:1ca32606:4700:3035::ac43:aaef
- Cloudflare
- Cloudflare (104.21.28.163, 172.67.170.239): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-allocations.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for etherfi-allocations.xyz
- Domain
- etherfi-allocations.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · etherfi-allocations.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.94.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.168.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:a84d2606:4700:3035::6815:5e86
- Cloudflare
- Cloudflare (104.21.94.134, 172.67.168.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-allocations.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for ethfi-allocations.xyz
- Domain
- ethfi-allocations.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-allocations.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.85.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.211.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:d3c22606:4700:3035::6815:55df
- Cloudflare
- Cloudflare (104.21.85.223, 172.67.211.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-s5-allocations.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for ethfi-s5-allocations.xyz
- Domain
- ethfi-s5-allocations.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-s5-allocations.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.0.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.186.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:ba282606:4700:3037::6815:99
- Cloudflare
- Cloudflare (104.21.0.153, 172.67.186.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-s5-distribution.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for ethfi-s5-distribution.xyz
- Domain
- ethfi-s5-distribution.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-s5-distribution.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.63.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.172.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:ac5e2606:4700:3033::6815:3fe5
- Cloudflare
- Cloudflare (104.21.63.229, 172.67.172.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-s5-vote.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “ethfi”Listed by MetaMaskCloudflare
DetailsHide details for ethfi-s5-vote.xyz
- Domain
- ethfi-s5-vote.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · ethfi-s5-vote.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.43.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:2b0b2606:4700:3037::ac43:d7b2
- Cloudflare
- Cloudflare (104.21.43.11, 172.67.215.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vote-s5-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for vote-s5-etherfi.xyz
- Domain
- vote-s5-etherfi.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-07 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · vote-s5-etherfi.xyz · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · vote-s5-etherfi.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.67.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.180.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:43c52606:4700:3031::ac43:b425
- Cloudflare
- Cloudflare (104.21.67.197, 172.67.180.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-club.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Reported by PhishDestroyCloudflare
DetailsHide details for etherfi-club.app
- Domain
- etherfi-club.app
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-04-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · etherfi-club.app · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.41.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.147.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:29832606:4700:3037::ac43:935e
- Cloudflare
- Cloudflare (104.21.41.131, 172.67.147.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- earn-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Reported by PhishDestroyCloudflare
DetailsHide details for earn-etherfi.xyz
- Domain
- earn-etherfi.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-03-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · earn-etherfi.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.36.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.195.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:24952606:4700:3033::ac43:c31f
- Cloudflare
- Cloudflare (104.21.36.149, 172.67.195.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- enter-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Reported by PhishDestroyCloudflare
DetailsHide details for enter-etherfi.app
- Domain
- enter-etherfi.app
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-03-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · enter-etherfi.app · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.32.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.156.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::ac43:9cd22606:4700:3036::6815:20ee
- Cloudflare
- Cloudflare (104.21.32.238, 172.67.156.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- season5-etherfi.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Reported by PhishDestroyCloudflare
DetailsHide details for season5-etherfi.xyz
- Domain
- season5-etherfi.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-03-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · season5-etherfi.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.53.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:35262606:4700:3037::ac43:d0ba
- Cloudflare
- Cloudflare (104.21.53.38, 172.67.208.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- s5-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Reported by PhishDestroyCloudflare
DetailsHide details for s5-etherfi.app
- Domain
- s5-etherfi.app
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-03-10 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · s5-etherfi.app · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.23.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.209.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::6815:17562606:4700:3036::ac43:d1dc
- Cloudflare
- Cloudflare (104.21.23.86, 172.67.209.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vote-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Reported by PhishDestroyCloudflare
DetailsHide details for vote-etherfi.app
- Domain
- vote-etherfi.app
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-03-10 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · vote-etherfi.app · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.22.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.205.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:16832606:4700:3032::ac43:cd14
- Cloudflare
- Cloudflare (104.21.22.131, 172.67.205.20): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- votes-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Reported by PhishDestroyCloudflare
DetailsHide details for votes-etherfi.app
- Domain
- votes-etherfi.app
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-03-10 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · votes-etherfi.app · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.88.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.152.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:58bf2606:4700:3031::ac43:9830
- Cloudflare
- Cloudflare (104.21.88.191, 172.67.152.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- snapshot-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Reported by PhishDestroyCloudflare
DetailsHide details for snapshot-etherfi.app
- Domain
- snapshot-etherfi.app
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-03-09 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · snapshot-etherfi.app · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.60.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.201.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:c9152606:4700:3037::6815:3cc7
- Cloudflare
- Cloudflare (104.21.60.199, 172.67.201.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- voting-etherfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”Listed by MetaMaskCloudflare
DetailsHide details for voting-etherfi.app
- Domain
- voting-etherfi.app
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-01-01 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · voting-etherfi.app · in the feed since 2026-11-01 11:44 UTC
- Addresses
- 104.21.68.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.187.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::6815:443a2606:4700:3037::ac43:bbc0
- Cloudflare
- Cloudflare (104.21.68.58, 172.67.187.192): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- earn-etherfi.appContains “etherfi”Listed by MetaMaskNo address or mail server yet
DetailsHide details for earn-etherfi.app
- Domain
- earn-etherfi.app
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2025-12-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · earn-etherfi.app · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-giveaway.app AU · AS133618 · Trellian Pty. LimitedContains “etherfi”Reported by PhishDestroyParking page · Above.comMX present
DetailsHide details for etherfi-giveaway.app
- Domain
- etherfi-giveaway.app
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2025-11-03 · Dynadot LLC.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · etherfi-giveaway.app · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 103.224.212.141 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates etherfi-giveaway.app to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.141): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- stake-etherfi.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “etherfi”PhishDestroy CommunitySuspicious · mediumParking page · Afternic
DetailsHide details for stake-etherfi.xyz
- Domain
- stake-etherfi.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-10-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates stake-etherfi.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- proposals-etherfi.top US · AS13335 · Cloudflare, Inc.4 addressesContains “etherfi”PhishDestroy CommunitySuspicious · highCloudflare
DetailsHide details for proposals-etherfi.top
- Domain
- proposals-etherfi.top
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-09-23 · Eranet International Limited
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.88.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.173.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:58322606:4700:3031::ac43:ad08
- Cloudflare
- Cloudflare (104.21.88.50, 172.67.173.8): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etherfi-registry.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “etherfi”PhishDestroy CommunitySuspicious · mediumParking page · Afternic
DetailsHide details for etherfi-registry.xyz
- Domain
- etherfi-registry.xyz
- Match
- A domain containing “etherfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates etherfi-registry.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ethfi-aidrop.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “ethfi”PhishDestroy CommunitySuspicious · mediumParking page · Afternic
DetailsHide details for ethfi-aidrop.xyz
- Domain
- ethfi-aidrop.xyz
- Match
- A domain containing “ethfi”, one of the names we match for ether.fi
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-02 · GMO Internet Group, Inc. d/b/a Onamae.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates ethfi-aidrop.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC

