s5-ethena[.]com

Analysis of the domain s5-ethena.com confirms its classification as a crypto scam site, specifically designed to impersonate Ethena, as indicated by the page title 'Overview | Ethena'. The domain was registered on September 18, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently offline as of July 24, 2026. Infrastructure analysis reveals the domain resolved to IP address 172.67.159.164, hosted on Cloudflare's network (AS13335) in the United States. The SSL certificate is issued by WE1, a provider commonly observed in both legitimate and malicious infrastructure.

Detection data indicates elevated risk: the domain appears on two security blocklists and is flagged by 2 of 93 security vendors on VirusTotal. It is also blocked by PhishDestroy and ScamSniffer, further corroborating its malicious classification. The Gridinsoft trust score of 0/100 aligns with these findings, reinforcing the domain's association with fraudulent activity. While the exact content and functionality of the site remain unanalyzed, the available evidence—including the page title, scam type designation, and detection by multiple security vendors—supports its identification as a crypto scam.

Defenders should treat this domain as confirmed malicious infrastructure. Network-level blocking of the IP 172.67.159.164 and domain-level denylisting of s5-ethena.com are recommended to prevent potential exposure. Organizations should also monitor for related domains registered through the same registrar or utilizing similar naming conventions, as these may indicate further phishing campaigns. Given the domain's current offline status, continuous monitoring for reactivation or migration to new infrastructure is advised.