ap-ethanafl[.]site

This domain, ap-ethanafl.site, is identified as a high-risk phishing site specifically targeting users of Ethena, a cryptocurrency platform. The domain is currently active and designed to mimic the legitimate Ethena application interface, as indicated by the page title 'App | Ethena.' Analysis confirms this is a generic phishing threat aimed at harvesting credentials or financial information from unsuspecting victims. Infrastructure analysis reveals the domain is registered through NameCheap, Inc. and resolves to the IP address 198.54.119.205. The site lacks an SSL certificate, leaving all transmitted data unencrypted and vulnerable to interception. Security vendors have flagged this domain, with 8 out of 95 VirusTotal engines detecting malicious activity. Additionally, the domain appears on two security blocklists, including PhishDestroy and ScamSniffer, further corroborating its malicious nature. No legitimate creation date or historical context is available, suggesting recent registration for illicit purposes. The domain remains active as of this report, posing an ongoing threat to users. Organizations and individuals are advised to block the domain and its associated IP address at the network level. End-users should be alerted to avoid interaction with the site, particularly those associated with Ethena or similar financial platforms. Monitoring for similar domains registered through the same registrar or resolving to the same IP range is recommended to preempt further phishing attempts. If credentials were entered on this site, immediate password resets and multi-factor authentication enablement are critical.