ethena[.]live

This domain ethena.live is flagged under threat type generic phishing with risk level high and remains active as of the report date July 12, 2026. The page title Ethena - Decentralized Finance Revolution combined with scam type Crypto Scam indicates impersonation of the Ethena decentralized finance platform. Infrastructure analysis reveals resolution to IPv6 address 2606:4700:3030::ac43:c6d6 hosted via AS13335 Cloudflare, Inc. in the US, with nameservers june.ns.cloudflare.com and sean.ns.cloudflare.com. The domain was registered through Web Commerce Communications Limited dba WebNic.cc and uses an SSL certificate from Google Trust Services / WE1 along with technologies Cloudflare and HTTP/3. HTTP status returns 403 while the domain appears on 2 security blocklists and shows VirusTotal detection by 1 out of 95 vendors.

Analysis indicates the domain is blocked by PhishDestroy and Enkrypt, confirming its classification as an active crypto scam. The combination of Cloudflare protection and the specific page title provides concrete evidence of targeted impersonation rather than a generic site. IP location details and the use of HTTP/3 further align with common patterns in cryptocurrency-related threats that leverage content delivery networks for resilience. Exact page content remains unanalyzed beyond the recorded title and scam type, leaving open questions about additional redirection mechanisms or payload delivery.

Defenders should block the domain ethena.live at DNS and network levels immediately given its high risk classification and continued activity. Monitoring the listed nameservers and IPv6 endpoint supports proactive tracking of similar registrations under the same infrastructure. Regular checks against the two known blocklists and the VirusTotal ratio of 1/95 can help validate ongoing status changes. The 403 response suggests possible active filtering that may evolve, requiring sustained observation without assuming static behavior.