Phishing sites impersonating Ether.fi

PhishDestroy has recorded 14 phishing domains impersonating Ether.fi since 2025-09-26, 0 of them in the last 30 days. The most used registrars are Cloudflare and PublicDomainRegistry.com; the most common TLDs are .com and .fi. Open Ether.fi only from its official app or a saved bookmark.

14
Domains, all time
0
Last 30 days
4
Online at last check
0
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 22026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Ether.fi phishing domains detected per day: 2 from 2026-07-25 to 2026-10-22; peak 2.

How to tell a fake Ether.fi site

Words most often added to the brand in reported domains: ether, connect, api, wallet, wailet, apps, appv, aeredrome, interest, apiv.

  • Type the address yourself or use a bookmark; phishing links for Ether.fi arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Ether.fi will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Ether.fi phishing domains

The 14 most recently detected domains impersonating Ether.fi
DomainFirst detectedStatus at last checkRegistrar
ethe.fi2026-08-04OnlineNETIM
humidi.fi2026-08-04OfflineNETIM
etherfiwc26.club2026-06-25OnlinePublicDomainRegistry.com
io-etherfi.pages.dev2026-06-13OnlineCloudflare
proposal-ether.finance2026-03-02OnlineNiceNIC
ether.fi-appv4-connect-wailet.com2026-02-26Offline—
ether.fi-api-connect-v3-app-wailet.live2026-02-26Offline—
ether.fi-api-v3-connect-apps-wallet.online2026-02-26OfflineWeb Commerce Communications dba WebNic.c
ether.fi-api-connect-appv3-wallet.com2026-02-26Offline—
ether.fi-api-v3-apps-connect-wallet.space2026-02-26Offline—
ether.fi-apiv4-connect-app-wallet.com2026-02-26Offline—
ether.fi-api-v2-connect-app-wailet.com2026-02-26Offline—
ether.fi-interest.app2025-11-19OfflinePublicDomainRegistry.com
aeredrome.financial2025-09-26OfflineCloudflare

All 14 Ether.fi reports

Where they are registered and hosted

Registrars

  1. Cloudflare2
  2. PublicDomainRegistry.com2
  3. NETIM2
  4. Web Commerce Communications dba WebNic.c1
  5. NiceNIC1

Top-level domains

  1. .com4
  2. .fi2
  3. .financial1
  4. .app1
  5. .space1
  6. .online1
  7. .live1
  8. .finance1

Hosting networks

  1. CLOUDFLARENET, US5
  2. CLOUDFLARENET - Cloudflare, Inc., US3
  3. Cloudflare, Inc.2

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Ether.fi; share of all PhishDestroy reports: 0.01%.