claims-ethena[.]fi

The domain claims-ethena.fi was registered on September 23, 2024 through Hosting Concepts B.V. d/b/a Registrar.eu and is currently hosted on Cloudflare infrastructure (AS13335, United States). DNS resolution points to the IP address 188.114.97.3, served by Cloudflare’s network and associated with the nameservers achiel.ns.cloudflare.com and aliza.ns.cloudflare.com. No TLS certificate is presented for the site, indicating that HTTPS connections are not available. The page title returned by the HTTP response is "Pieni hetki...", which provides no indication of the underlying payload or target of the operation.

The domain has been placed on a single security blocklist and is explicitly blocked by PhishDestroy. Independent trust scoring from Gridinsoft assigns a zero‑out‑of‑hundred rating, reflecting a high confidence in malicious intent. VirusTotal analysis shows that the domain was scanned by 95 antivirus and URL‑reputation vendors, none of which flagged it at the time of scanning; this absence of detections does not constitute validation of safety. The threat classification supplied by intelligence sources identifies the activity as a crypto drainer, a type of scam that typically seeks to exfiltrate cryptocurrency assets from victims.

Concrete evidence beyond the infrastructure and blocklist presence is limited; the content of the landing page has not been publicly disclosed, and no SSL/TLS protection is observed, which may facilitate man‑in‑the‑middle manipulation of traffic. Defenders should add claims-ethena.fi to domain blocklists, enforce outbound filtering for connections to the associated IP address, and monitor for any related traffic patterns that match crypto‑drainer campaigns. Continuous re‑evaluation is advised, as the site status may change if the operators reactivate the domain or alter its hosting configuration.