ethenafi[.]network

Analysis of ethenafi.network conducted on July 24, 2026 confirms that the domain is currently offline but was previously associated with a crypto‑related phishing campaign. The site resolved to the IPv4 address 109.120.185.68, which belongs to AS210644 (AEZA GROUP LLC) and is geolocated in Germany. No TLS certificate was observed, indicating that connections were unencrypted. The page title returned by the server was “Zappinet Ethena | Introducing Zappinet Ethena: Where Excellence Meets Nurturing Care”, suggesting an attempt to present a legitimate‑sounding service.

The domain was registered through the RIPE NCC registrar; no additional registrar details are provided. Infrastructure scoring from Gridinsoft assigned a trust rating of 0 out of 100, reflecting a high confidence in malicious intent. The domain appears on a single security blocklist and was flagged by PhishDestroy, confirming active mitigation by at least one anti‑phishing service. VirusTotal recorded a single positive detection out of 95 scanned engines, reinforcing the suspicion of abuse.

The lack of SSL, low trust score, and the presence of a crypto scam classification collectively indicate that the domain was used to lure victims into fraudulent financial interactions. Defenders should ensure that the IP address 109.120.185.68 is added to network deny lists, enforce URL filtering for the exact host name, and monitor for any re‑registration attempts. Continuous observation of the associated ASN and rapid updates to intrusion‑prevention signatures are recommended to mitigate potential re‑use of the infrastructure.