ethenafi-reward[.]cfd

Analysis as of July 29, 2026 indicates that the domain ethenafi-reward.cfd is actively used in a generic phishing campaign. The domain was registered on June 07, 2026 and has been observed by multiple security infrastructures. VirusTotal records show that six of ninety‑one scanned engines have flagged the domain as malicious, indicating a modest but non‑trivial detection rate.

The domain is currently listed on three external blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a threat. Threat intelligence assigns an elevated risk level and marks the entity as active. No publicly disclosed hosting IP, registrar, SSL certificate details, or HTTP response codes are available in the current dataset, leaving those infrastructure components unverified.

Defenders should add ethenafi-reward.cfd to domain‑based deny lists, enforce DNS‑level filtering, and monitor for any related command‑and‑control traffic. Continuous re‑assessment is recommended as additional telemetry becomes available, particularly regarding hosting location and potential payload delivery mechanisms. Users encountering URLs that resolve to this domain should be warned against providing credentials or personal information, and any attempted connections should be logged for further investigation.