# register-etherfi.net — SUSPICIOUS

> register-etherfi.net posed as Etherfi to steal credentials. The domain is now offline. Stay alert and avoid interacting with suspicious Etherfi sites.

## Summary
PhishDestroy identifies register-etherfi.net as a phishing domain impersonating the cryptocurrency platform Etherfi. Such threats are critical as they aim to deceive users into divulging sensitive information, potentially leading to financial loss or account compromise. Although this campaign is flagged as low risk, users should remain vigilant against similar scams.

The domain register-etherfi.net was registered on March 12, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolved to the IP address 172.67.202.236 during its operation. VirusTotal analysis showed 2 out of 95 security vendors flagged this domain, and it appeared on five security blocklists. Importantly, the domain is currently offline, reducing the immediate threat posed by this specific site.

Users are advised to avoid clicking links or entering credentials on any site resembling Etherfi unless verified through official channels. Always double-check URLs for authenticity and use trusted security tools to detect phishing attempts. Reporting suspicious domains to security providers and remaining informed on phishing tactics will help mitigate risks from similar fraudulent campaigns.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Etherfi

## Domain Intelligence
- Registered: 2026-03-12 19:07:01
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 172.67.202.236
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: major.ns.cloudflare.com sierra.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["ADMINUSLabs", "Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 5 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "SEAL", "Enkrypt"]

## Evidence
- Screenshot: https://i.ibb.co/XrC8Fwd1/8985c36c3a1a.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/9065c02e-f739-4e04-81a2-6e16c15e95eb
- PhishDestroy: https://phishdestroy.io/domain/register-etherfi.net/
- LLM endpoint: https://phishdestroy.io/domain/register-etherfi.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/register-etherfi.net/
Last updated: 2026-03-19