# Phishing sites impersonating Ether.fi

PhishDestroy has recorded 14 phishing domains impersonating Ether.fi since 2025-09-26, 0 of them in the last 30 days. The most used registrars are Cloudflare and PublicDomainRegistry.com; the most common TLDs are .com and .fi. Open Ether.fi only from its official app or a saved bookmark.

14Domains, all time

0Last 30 days

4Online at last check

0Confirmed takedowns

## New domains in the last 90 days

Ether.fi phishing domains detected per day: 2 from 2026-07-25 to 2026-10-22; peak 2.

## How to tell a fake Ether.fi site

Words most often added to the brand in reported domains: ether, connect, api, wallet, wailet, apps, appv, aeredrome, interest, apiv.
- Type the address yourself or use a bookmark; phishing links for Ether.fi arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Ether.fi will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Ether.fi phishing domains

The 14 most recently detected domains impersonating Ether.fi
Domain | First detected | Status at last check | Registrar | 
[ethe.fi](https://phishdestroy.io/domain/ethe.fi/) | 2026-08-04 | Online | NETIM | 
[humidi.fi](https://phishdestroy.io/domain/humidi.fi/) | 2026-08-04 | Offline | NETIM | 
[etherfiwc26.club](https://phishdestroy.io/domain/etherfiwc26.club/) | 2026-06-25 | Online | PublicDomainRegistry.com | 
[io-etherfi.pages.dev](https://phishdestroy.io/domain/io-etherfi.pages.dev/) | 2026-06-13 | Online | Cloudflare | 
[proposal-ether.finance](https://phishdestroy.io/domain/proposal-ether.finance/) | 2026-03-02 | Online | NiceNIC | 
[ether.fi-appv4-connect-wailet.com](https://phishdestroy.io/domain/ether.fi-appv4-connect-wailet.com/) | 2026-02-26 | Offline | — | 
[ether.fi-api-connect-v3-app-wailet.live](https://phishdestroy.io/domain/ether.fi-api-connect-v3-app-wailet.live/) | 2026-02-26 | Offline | — | 
[ether.fi-api-v3-connect-apps-wallet.online](https://phishdestroy.io/domain/ether.fi-api-v3-connect-apps-wallet.online/) | 2026-02-26 | Offline | Web Commerce Communications dba WebNic.c | 
[ether.fi-api-connect-appv3-wallet.com](https://phishdestroy.io/domain/ether.fi-api-connect-appv3-wallet.com/) | 2026-02-26 | Offline | — | 
[ether.fi-api-v3-apps-connect-wallet.space](https://phishdestroy.io/domain/ether.fi-api-v3-apps-connect-wallet.space/) | 2026-02-26 | Offline | — | 
[ether.fi-apiv4-connect-app-wallet.com](https://phishdestroy.io/domain/ether.fi-apiv4-connect-app-wallet.com/) | 2026-02-26 | Offline | — | 
[ether.fi-api-v2-connect-app-wailet.com](https://phishdestroy.io/domain/ether.fi-api-v2-connect-app-wailet.com/) | 2026-02-26 | Offline | — | 
[ether.fi-interest.app](https://phishdestroy.io/domain/ether.fi-interest.app/) | 2025-11-19 | Offline | PublicDomainRegistry.com | 
[aeredrome.financial](https://phishdestroy.io/domain/aeredrome.financial/) | 2025-09-26 | Offline | Cloudflare | 

[All 14 Ether.fi reports](https://phishdestroy.io/domain/?brand=Ether.fi)

## Where they are registered and hosted

### Registrars

- Cloudflare2
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)2
- [NETIM](https://phishdestroy.io/registrar/netim/)2
- [Web Commerce Communications dba WebNic.c](https://phishdestroy.io/registrar/webnic/)1
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)1

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)4
- [.fi](https://phishdestroy.io/tld/fi/)2
- [.financial](https://phishdestroy.io/tld/financial/)1
- [.app](https://phishdestroy.io/tld/app/)1
- [.space](https://phishdestroy.io/tld/space/)1
- [.online](https://phishdestroy.io/tld/online/)1
- [.live](https://phishdestroy.io/tld/live/)1
- [.finance](https://phishdestroy.io/tld/finance/)1

### Hosting networks

- CLOUDFLARENET, US5
- CLOUDFLARENET - Cloudflare, Inc., US3
- Cloudflare, Inc.2

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/)
- [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Ether.fi; share of all PhishDestroy reports: 0.01%.

Canonical: https://phishdestroy.io/brand/ether-fi/