# votes-etherfi.app — SUSPICIOUS

> Explore whether votes-etherfi.app is secure or a phishing threat. Learn what risks this domain may pose before interacting with Etherfi services.

## Summary
PhishDestroy identifies votes-etherfi.app as a suspicious domain potentially involved in generic phishing activities. Such threats are critical because they can deceive users into divulging sensitive information, leading to identity theft or financial loss. The domain's association with 'Etherfi' suggests it might target users interested in cryptocurrency or decentralized finance, increasing the urgency of caution.

The domain resolves to the IP address 188.114.96.3 and exhibits a low PageSpeed score of 26/100, which often indicates a hastily constructed website—a common trait in phishing setups. Despite these red flags, VirusTotal scans currently show zero detections, meaning no security vendors have yet flagged this site as malicious. However, the lack of detections does not guarantee safety, and the domain remains under active investigation based on other suspicious indicators.

Users are advised to exercise extreme caution when interacting with votes-etherfi.app. Avoid submitting any personal, login, or financial information on this platform. It is recommended to verify the legitimacy of Etherfi services through official channels and trusted sources before engagement. Monitoring updates from PhishDestroy and other cybersecurity resources can help users stay informed about any changes in the domain’s risk status.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Etherfi

## Domain Intelligence
- Registered: 2026-03-10 23:07:01
- Registrar: REGISTRAR_NOT_FOUND
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: curt.ns.cloudflare.com love.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ADMINUSLabs", "Kaspersky", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Live Page Content
- Meta description: Delegated Staking Protocol
- Meta title: ether.fi

### Page Text
Etherfi Vote on the $ETHFI
            Season 5 Rewards Date All active voters will gain a bonus allocation upon rewards launch. Vote & Earn Rewards Connect Wallet Connect with MetaMask The site wants to: Only connect with sites
                                you trust. Learn more Connect Details Hex Estimated changes Estimated fee Confirm Spending cap request This site wants
                                    permission to spend your tokens. Estimated changes Spender Confirm Spending cap request for
                                    your Verify third-party
                                details Custom spending cap Next Site requested spending cap Estimated fee Approve Details Hex Estimated changes Estimated fee Confirm Continue in MetaMask Accept connection request in the wallet

### External Scripts
- https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js
- https://cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js
- https://cdn.jsdelivr.net/npm/merkletreejs@latest/merkletree.js

## Evidence
- Screenshot: https://i.ibb.co/3YTd776n/99caa6cc61f0.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/bc052537-58ea-46d5-aa44-f32d429fd4c3
- PhishDestroy: https://phishdestroy.io/domain/votes-etherfi.app/
- LLM endpoint: https://phishdestroy.io/domain/votes-etherfi.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/votes-etherfi.app/
Last updated: 2026-03-15