# hub-ethena.finance — SUSPICIOUS

> PhishDestroy identifies hub-ethena.finance as an active cryptocurrency drainer phishing site with 0/95 VirusTotal detections. Created April 06, 2026.

## Summary
PhishDestroy identifies hub-ethena.finance as a suspected cryptocurrency drainer designed to trick users into connecting wallets and siphon digital assets. This fraudulent domain mimics the branding of Ethena, a legitimate stablecoin protocol, to exploit user trust through brand impersonation. Visitors risk losing all crypto assets stored in connected wallets if they interact with the site's wallet-connect prompts or fake transaction dialogs.


This domain was flagged with a risk status of 'under_investigation' and key technical indicators include zero detections on VirusTotal among 95 scanners as of the latest check, a creation date of April 06, 2026, and registration via NICENIC INTERNATIONAL GROUP CO., LIMITED. The site resolves to IP address 172.67.144.253 and uses a valid Let's Encrypt SSL certificate to appear legitimate. These red flags suggest a newly deployed phishing infrastructure likely targeting Ethena users or DeFi investors.


If you visited hub-ethena.finance, immediately disconnect your wallet, revoke any permissions via blockchain explorers like Etherscan or Tronscan using the 'Token Approval' or 'Contract Interaction' sections, and scan your device with updated antivirus software. Never enter seed phrases, private keys, or approve transactions on this site. Report the domain to your wallet provider, Ethena's official support channels, and file a complaint with local cybercrime units if financial loss occurred. Stay vigilant by verifying URLs through official Ethena channels before any interaction.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-06 14:46:11
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.144.253

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/hub-ethena.finance
- PhishDestroy: https://phishdestroy.io/domain/hub-ethena.finance/
- LLM endpoint: https://phishdestroy.io/domain/hub-ethena.finance/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hub-ethena.finance/
Last updated: 2026-04-06