# vote-ethena.fi — MALICIOUS

> vote-ethena.fi is a high-risk phishing domain taken offline after detection. Stay alert and avoid interactions to protect your data.

## Summary
PhishDestroy identifies vote-ethena.fi as a high-risk generic phishing domain that was actively attempting to deceive users. Such phishing threats are critical because they can lead to credential theft, financial loss, and compromised personal information. The site's misleading content, indicated by the page title "Pieni hetki...", suggests it was designed to lure visitors into a false sense of trust.

The domain vote-ethena.fi was created recently on February 21, 2026, and resolved to an IPv6 address (2a06:98c1:3120::3). It was flagged by 10 out of 95 VirusTotal security vendors and appeared in one security blocklist. AlienVault OTX also associates this domain with a threat pulse, confirming its malicious intent. Currently, the domain is offline, mitigating ongoing risk, but its prior activity highlights the importance of vigilance.

Users should avoid visiting vote-ethena.fi or interacting with any communications referencing it. Remain cautious about unsolicited links and verify URLs carefully before entering sensitive data. Security teams should ensure this domain remains blocked within their networks, and end users should update protective software regularly to guard against similar phishing attempts. Reporting suspicious domains maintains safer online environments for all.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Pieni hetki...

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 2a06:98c1:3120::3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["meilani.ns.cloudflare.com", "kianchau.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 10 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "Fortinet", "G-Data", "Lionic", "Seclookup", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0199e643-e03a-73fd-94b8-21a58b161bca.png
- PhishDestroy: https://phishdestroy.io/domain/vote-ethena.fi/
- LLM endpoint: https://phishdestroy.io/domain/vote-ethena.fi/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/vote-ethena.fi/
Last updated: 2026-03-19