ethna-fi[.]com

This domain, ethna-fi.com, is an active phishing site designed to deceive users into believing they can claim Ethena tokens through a fake decentralized exchange reward portal. The site displays the page title 'Claim Ethena on Dex Earn Rewards With Joyful Ease,' mimicking legitimate cryptocurrency reward programs to trick victims into entering sensitive wallet credentials or private keys. Analysis indicates the site is engineered to harvest authentication details, which are then used to drain digital assets from connected wallets. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, which is part of Cloudflare’s network, a common obfuscation tactic used to conceal the true origin of phishing infrastructure. Security validation shows the domain is flagged by 8 out of 95 antivirus engines on VirusTotal and appears on two independent security blocklists. Additionally, the site is actively blocked by multiple transaction monitoring tools, further confirming its role in fraudulent activity. Users who have visited ethna-fi.com or interacted with its content should take immediate action to mitigate risk. Disconnect any wallets linked to the site and revoke all associated smart contract approvals using a trusted blockchain explorer. Monitor connected accounts for unauthorized transactions and consider transferring assets to a new, secure wallet if compromise is suspected. Report the domain to relevant security platforms and cryptocurrency abuse databases to assist in broader threat disruption efforts. Avoid re-engaging with the site or any communications originating from it, as follow-up attacks may occur.