Phishing sites impersonating Etherfi

PhishDestroy has recorded 75 phishing domains impersonating Etherfi since 2025-08-08, 6 of them in the last 30 days. The most used registrars are PublicDomainRegistry.com and NICENIC; the most common TLDs are .xyz and .com. Open Etherfi only from its official app or a saved bookmark.

75
Domains, all time
6
Last 30 days
28
Online at last check
4
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 12026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 12026-08-12: 02026-08-13: 02026-08-14: 12026-08-15: 22026-08-16: 12026-08-17: 12026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 12026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 12026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 62026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Etherfi phishing domains detected per day: 15 from 2026-07-25 to 2026-10-22; peak 6.

How to tell a fake Etherfi site

Words most often added to the brand in reported domains: ether, season, vote, etherfiwc, arweave, airdrop, etherfinances, reward, claim, snapshot.

  • Type the address yourself or use a bookmark; phishing links for Etherfi arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Etherfi will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Etherfi phishing domains

The 50 most recently detected domains impersonating Etherfi
DomainFirst detectedStatus at last checkRegistrar
season5-etherfi.cfd2026-10-07OnlineSpaceship
season5-etherfi.cyou2026-10-07OnlineSpaceship
season5-etherfi.asia2026-10-07OnlineSpaceship
season5-etherfi.click2026-10-07OnlineSpaceship
proposals-ether.cyou2026-10-07OnlineSpaceship
proposals-ether.asia2026-10-07OnlineSpaceship
etherfi-interest.xyz2026-09-19OnlineNICENIC
app-stonkfun.xyz2026-09-14UnknownNICENIC
etherfidex.pages.dev2026-08-17OfflineCloudflare Pages
xhloo7onnepiqptafdbxmj4anm7iuiatfg65tllx42szebqoe53a.arweave.net2026-08-16OnlineNAMECHEAP
oepyikr62somsy5uhrhbmfgfgpdmyyvvirudgvqwpymmaurgmsza.arweave.net2026-08-15OnlineNAMECHEAP
a5x5rfcylwesyzg4qcgtlhg4kpfwgp46mgwmk7khujf7x67xbipq.arweave.net2026-08-15OnlineNAMECHEAP
lawooxgyijwd55ckdtcjucacyfws2u5r3orqtz6ow54z6zqwxz4q.arweave.net2026-08-14OnlineNameCheap
etherfi-vote.cloud2026-08-11UnknownNICENIC
vote.hub-ether.finance2026-08-02OfflineNICENIC
etherfi-v4.com2026-07-01OnlineNICENIC
get-etherfinances.xyz2026-06-24UnknownNICENIC
etherfiwc26.org2026-06-22OfflineKey-Systems
etherfidexresolve.pages.dev2026-06-21OfflineCloudflare
votings-etherfi.xyz2026-06-20UnknownNICENIC
votes-etherfinances.xyz2026-06-20UnknownNICENIC
vote-etherfinances.xyz2026-06-20UnknownNICENIC
etherfi-wc26.com2026-06-19OfflineNICENIC
etherfiwc26.xyz2026-06-19UnknownNICENIC
wc-etherfi.com2026-06-18OnlineNICENIC
seasons5-etherfi.xyz2026-06-17OfflinePublicDomainRegistry.com
etherfiwc26.app2026-06-17OfflineNICENIC
etherfiwc26.net2026-06-16OnlinePublicDomainRegistry.com
etherfiwc26.com2026-06-16OnlinePublicDomainRegistry.com
club-etherfi.com2026-06-15OnlinePublicDomainRegistry.com
club-etherfi.net2026-06-15OnlinePublicDomainRegistry.com
vote-s5-etherfi.xyz2026-06-15OnlinePublicDomainRegistry.com
derive-airdrop.pages.dev2026-06-09OnlineCloudflare Pages
x-etherfi.xyz2026-04-30OfflinePublicDomainRegistry.com
s5-ether.finance2026-04-04UnknownNICENIC
restake-etherfi.xyz2026-03-21OfflinePublicDomainRegistry.com
season-etherfi.xyz2026-03-16OfflinePublicDomainRegistry.com
snapshot-etherfi.xyz2026-03-16OfflinePublicDomainRegistry.com
reward-etherfi.xyz2026-03-16OfflinePublicDomainRegistry.com
xtogetherfit.cl2026-03-12OnlineNIC Chile
etherfi-download.icu2026-03-12OfflineHOSTINGER operations
etherfi.name2026-03-12OfflinePublicDomainRegistry.com
xtogetherfit.com2026-03-12OnlineGoDaddy.com
register-etherfi.net2026-03-12OfflinePublicDomainRegistry.com
dashboard-etherfi.xyz2026-03-12OfflinePublicDomainRegistry.com
earn-etherfi.xyz2026-03-12OfflinePublicDomainRegistry.com
enter-etherfi.app2026-03-11OfflinePublicDomainRegistry.com
season5-etherfi.xyz2026-03-11OfflinePublicDomainRegistry.com
s5-etherfi.app2026-03-11OfflinePublicDomainRegistry.com
votes-etherfi.app2026-03-11OnlinePublicDomainRegistry.com

All 75 Etherfi reports

Where they are registered and hosted

Registrars

  1. PublicDomainRegistry.com24
  2. NICENIC14
  3. Spaceship6
  4. NiceNIC5
  5. Cloudflare5
  6. Web Commerce Communications3
  7. NAMECHEAP3
  8. AFRIREGISTER2

Top-level domains

  1. .xyz20
  2. .com12
  3. .net9
  4. .app7
  5. .dev7
  6. .site2
  7. .icu2
  8. .finance2

Hosting networks

  1. Cloudflare, Inc.21
  2. CLOUDFLARENET - Cloudflare, Inc., US20
  3. CLOUDFLARENET, US15
  4. AS13335 Cloudflare, Inc.6
  5. Datacamp Limited4
  6. HETZNER-AS Hetzner Online GmbH, DE2
  7. FEMO IT SOLUTIONS LIMITED2
  8. GOOGLE, US1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Etherfi; share of all PhishDestroy reports: 0.03%.