ethena[.]com

ethena.com was registered on 2026-02-21 through Domain.com - Network Solutions, LLC and is currently resolved to the IPv4 address 199.115.220.20, which belongs to Vivio Technologies (AS13438) in the United States. The host presents a valid Let's Encrypt (R12) certificate and returns HTTP 200 with a page title of “ethena”. Infrastructure fingerprints show a Windows Server operating system running Internet Information Services, and the domain is delegated to the UltraDNS name servers udns1.ultradns.net and udns2.ultradns.net. The site is classified as a crypto‑related scam and is listed as active. Reputation data indicate that the domain is blocked by PhishDestroy, appears on a single security blocklist, and received a Gridinsoft trust score of 0/100. VirusTotal analysis recorded a single positive detection out of 93 scanning engines. The limited detection count suggests that the payload or phishing vector may be novel or minimally observed. At present, the specific content, login capture mechanisms, or targeted accounts have not been disclosed in public intelligence. Defenders should consider immediate sink‑holing or DNS‑level blocking of ethena.com and its resolved IP address, enforce outbound filtering for traffic to the associated nameservers, and monitor for similar Windows‑IIS hosting patterns. Ongoing collection of payload samples and URL paths is recommended to refine detection rules and assess whether the campaign expands to additional infrastructure.