ethenadesktop[.]app

The domain ethenadesktop.app is a generic phishing site posing as a cryptocurrency platform under the guise 'Ethena Desktop App - Digital Dollars for the Internet Economy.' It does not impersonate a known brand but operates as a crypto scam, targeting users with fraudulent promises of digital currency rewards. As of the latest verification, ethenadesktop.app has been taken offline, though it previously exhibited elevated risk due to its deceptive nature.

Technical analysis reveals that ethenadesktop.app was flagged by 1 of 95 security vendors on VirusTotal, including Fortinet, and appeared on 2 security blocklists (PhishDestroy and ScamSniffer). The domain was registered through Vercel Inc. and resolved to the IP address 216.198.79.65, hosted on Amazon.com, Inc.'s infrastructure (AS16509) in the US. The SSL certificate was issued by Let's Encrypt (R13), and the site employed technologies such as Vercel and HSTS. The observed HTTP status was 451, indicating unavailability due to legal or policy restrictions. Nameservers were ns1.vercel-dns.com and ns2.vercel-dns.com.

Users who interacted with ethenadesktop.app should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts as an additional precaution. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime authorities to aid in broader mitigation efforts. Monitor accounts for unauthorized transactions and consider using security tools to detect further phishing attempts.