club-etherfi[.]com

club-etherfi.com was registered on 16 April 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to the IP address 188.114.97.3, which is owned by CloudFlare, Inc. and located in the CA region. DNS resolution is delegated to demi.ns.cloudflare.com and eoin.ns.cloudflare.com. The site presents a Let's Encrypt certificate (E8) and currently returns HTTP 403 for direct requests, with the page title reported as “Just a moment…”.

VirusTotal records a single positive detection out of 95 scanned security vendors, and Gridinsoft assigns a trust score of 0 / 100. AlienVault OTX references the domain in one threat‑intelligence pulse, and the domain appears on three public blocklists. It is actively blocked by PhishDestroy, MetaMask, and SEAL. The threat is classified as generic_phishing and assigned a high risk rating.

Public analysis of the page content is limited to the title; the underlying payload, credential‑stealing mechanisms, or targeted brand are not disclosed in the available intelligence. The HTTP 403 response suggests that the site may be employing access controls or serving content only to specific request patterns, leaving the exact phishing vector uncertain.

Defenders should add 188.114.97.3 and club‑etherfi.com to network‑level deny lists, enforce DNS filtering for the domain, and monitor CloudFlare name‑server activity for any sudden changes. Continuous re‑scanning with multi‑engine services is advised to capture additional detections, and incident response teams should be prepared to investigate any credential submissions that may be routed through this infrastructure.