Ethena
Certificate findings for Ethena
DomainSpoof matched these hostnames, from public certificate logs, to Ethena's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 33 findings, grouped by hostname
- 1-ethenagov.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for 1-ethenagov.pages.dev
- Hostname
- 1-ethenagov.pages.dev
- First seen
- 2026-11-04 17:52 UTC
- First published
- 2026-11-04 18:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 18:17 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-04 07:04 UTC to 2027-02-02 07:04 UTCLogged 2026-11-04 08:02 UTC in IPng Networks Gouda2027h1, entry 312,065,953SHA-256 324af32d1653748b1517b6bf165568ad47b603c3da562cb5fa1bc6e07df15be4Public key SHA-256 346d10164dc3365dfdf1d947ab16b6300addaa6eac4a9b13177d5d53e243e7e6
- Brand
- Ethena
- Addresses
- 172.66.45.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.46.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2d272606:4700:310c::ac42:2ed9
- Cloudflare
- Cloudflare (172.66.45.39, 172.66.46.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- ethenagov.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for ethenagov.pages.dev
- Hostname
- ethenagov.pages.dev
- First seen
- 2026-11-04 11:51 UTC
- First published
- 2026-11-04 13:12 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 13:32 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-03 16:15 UTC to 2027-02-01 16:15 UTCLogged 2026-11-03 17:14 UTC in IPng Networks Halloumi2027h1, entry 351,092,050SHA-256 b7816cba246a24d15d542afb3a4ea9b9a474d87cf42642eb18bc4ea7fe936f83Public key SHA-256 c3b27dab0ac09bb2cdcc142a29a64ea124e265a54f8fe91dbae0e0d4398d9a4c
- Brand
- Ethena
- Addresses
- 172.66.44.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2cfb2606:4700:310c::ac42:2f05
- Cloudflare
- Cloudflare (172.66.44.251, 172.66.47.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- www.ethena.online US · AS16509 · Amazon.com, Inc.2 addressesListedParking page · AfternicUnder ethena.online, listed by MetaMaskMX absentSPF -allDMARC missingRegistered 4 d ago
DetailsHide details for www.ethena.online
- Hostname
- www.ethena.online
- First seen
- 2026-11-04 10:56 UTC
- First published
- 2026-11-04 11:54 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 12:10 UTC
- Listed
- MetaMask, listing ethena.online and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificateValid 2026-11-04 10:52 UTC to 2027-05-21 10:52 UTCLogged 2026-11-04 10:52 UTC in Google Argon2027h1, entry 857,089,951SHA-256 17a29c4d3b9c9eda554a2c72ea2c608f2bf6622bcd660c76fdf495ebf016ac11Public key SHA-256 fcd7fead3f3386e465961fcc6d98097b650eccdfdbe90a0f0983504d89e398b6
- Brand
- Ethena
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates ethena.online to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Domain
- ethena.online
- Registered
- 2026-11-01 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- SPF record with -all: other senders fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 09:49 UTC
- govern-ethena.app US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 19 d ago
DetailsHide details for govern-ethena.app
- Hostname
- govern-ethena.app
- First seen
- 2026-11-04 07:46 UTC
- First published
- 2026-11-04 08:03 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 08:17 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36 · precertificateValid 2026-11-04 00:00 UTC to 2027-01-19 23:06 UTCLogged 2026-11-04 07:45 UTC in DigiCert Wyvern2027h1, entry 399,653,735SHA-256 2c0b61e27cd709ad075ba90ca63ebd955d69c074a182526973cfd625c7fa7895Public key SHA-256 ddf5cbc44d73e60e94940d0dbc9d5a59f8c03e198b7d60ff1aa7cfef6c1ba6ce
- Brand
- Ethena
- Addresses
- 104.21.38.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.139.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:8b502606:4700:3032::6815:26d7
- Cloudflare
- Cloudflare (104.21.38.215, 172.67.139.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- govern-ethena.app
- Registered
- 2026-10-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:41 UTC
- ethenagov.icu US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 d ago
DetailsHide details for ethenagov.icu
- Hostname
- ethenagov.icu
- First seen
- 2026-11-03 23:50 UTC
- First published
- 2026-11-04 00:32 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 00:45 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by Cloudflare TLS Issuing ECC CA 4 · precertificateValid 2026-11-03 17:09 UTC to 2027-02-01 17:17 UTCLogged 2026-11-03 17:19 UTC in DigiCert Sphinx2027h1, entry 344,819,353SHA-256 00276c4d13d83b862786e9b506c393fc21bb81a4d57dc01f549df8638c13d30dPublic key SHA-256 e50773e0dd82a874bc3f113382ad7e9381add486400debfa9cf4b99a99cc5a8d
- Brand
- Ethena
- Addresses
- 104.21.91.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.214.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:5b5b2606:4700:3032::ac43:d6c6
- Cloudflare
- Cloudflare (104.21.91.91, 172.67.214.198): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ethenagov.icu
- Registered
- 2026-11-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 05:06 UTC
- xgclwuslq3cm.ethena-rewardhub.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…ReportedParking page · ParkingCrew (Team Internet)Under ethena-rewardhub.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
DetailsHide details for xgclwuslq3cm.ethena-rewardhub.com
- Hostname
- xgclwuslq3cm.ethena-rewardhub.com
- First seen
- 2026-11-03 10:51 UTC
- First published
- 2026-11-03 11:04 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 11:13 UTC
- Reported
- PhishDestroy, listing ethena-rewardhub.com and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-03 09:47 UTC to 2027-02-01 09:47 UTCLogged 2026-11-03 10:46 UTC in Geomys Tuscolo2027h1, entry 457,850,417SHA-256 085dc1f00683c439ca0d4201e7d839bd00cdc2d1f5bfda8bda4fd21aa5bf19dbPublic key SHA-256 80e390dfbbcf056d562c13a64628f55b144ba715e7a403a0742ea7b41c958e2a
- PhishDestroy
- Brand
- Ethena
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Domain
- ethena-rewardhub.com
- Registered
- 2025-12-17 · Hosting Concepts B.V. d/b/a Registrar.eu
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:44 UTC
- votes-ethena.finance US · AS13335 · Cloudflare, Inc.4 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for votes-ethena.finance
- Hostname
- votes-ethena.finance
- First seen
- 2026-11-02 22:56 UTC
- First published
- 2026-11-02 23:19 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 23:32 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36 · precertificateValid 2026-11-02 00:00 UTC to 2027-01-29 23:59 UTCLogged 2026-11-02 22:52 UTC in DigiCert Wyvern2027h1, entry 382,782,146SHA-256 b805187c00a24eb829264ae0aeb4d1a88e1535ba80f2bd573dc9dfa5fc50f575Public key SHA-256 d7e7d7f1720833516cfcb20fd2894e8a6ac7b98b02f8b3297886b6f8a644812d
- PhishDestroy
- Brand
- Ethena
- Addresses
- 104.21.1.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.128.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:14f2606:4700:3035::ac43:80ca
- Cloudflare
- Cloudflare (104.21.1.79, 172.67.128.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- votes-ethena.finance
- Registered
- 2026-01-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 04:47 UTC
- s7-ethena.cfd US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
DetailsHide details for s7-ethena.cfd
- Hostname
- s7-ethena.cfd
- First seen
- 2026-11-02 17:15 UTC
- First published
- 2026-11-02 18:02 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 18:09 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36Valid 2026-11-02 00:00 UTC to 2027-01-29 15:01 UTCLogged 2026-11-02 17:10 UTC in IPng Networks Gouda2027h1, entry 295,083,981SHA-256 2998c01bc0e3cb311adb1dbb7abc7e747fab00657e33a09a8ccea0b37fc86fb8Public key SHA-256 b66d49a7758c315425022592119eaa44c9987b9da82be765f11ae59700b8f7b9
- Brand
- Ethena
- Addresses
- 104.21.58.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.166.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:3af32606:4700:3030::ac43:a648
- Cloudflare
- Cloudflare (104.21.58.243, 172.67.166.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- s7-ethena.cfd
- Registered
- 2026-08-22 · Spaceship, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 00:15 UTC
- ethenafnd.lol US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for ethenafnd.lol
- Hostname
- ethenafnd.lol
- First seen
- 2026-11-02 13:57 UTC
- First published
- 2026-11-02 14:21 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 14:41 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-02 12:54 UTC to 2027-01-31 13:52 UTCLogged 2026-11-02 13:54 UTC in Google ParcelYard2027h1, entry 573,038,486SHA-256 1949d3a734611787581d508c73c0281ec698031ccd2c423a8cd9dfada1bf294ePublic key SHA-256 ea89ce75ca0a486d67104da2f3af7768dcafcd78ce8b014234362eb28768ed07
- Brand
- Ethena
- Addresses
- 104.21.95.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.143.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:8f422606:4700:3031::6815:5f31
- Cloudflare
- Cloudflare (104.21.95.49, 172.67.143.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ethenafnd.lol
- Registered
- 2026-07-07 · Global Domain Group LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 00:15 UTC
- ethenafi.team US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
DetailsHide details for ethenafi.team
- Hostname
- ethenafi.team
- First seen
- 2026-11-02 05:36 UTC
- First published
- 2026-11-02 05:45 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 05:52 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36 · precertificateValid 2026-11-02 00:00 UTC to 2027-01-19 04:53 UTCLogged 2026-11-02 05:33 UTC in IPng Networks Gouda2027h1, entry 291,013,320SHA-256 3ea747c67fcfb6c34c7816d079f5d34f028d6f5c76ee260d6c2c5f4b4b09b256Public key SHA-256 c4356679c1e42748b851761ad21e42406a304237ee5b58149abbed40d4c731f8
- Brand
- Ethena
- Addresses
- 104.21.78.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.216.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:d8062606:4700:3032::6815:4e2d
- Cloudflare
- Cloudflare (104.21.78.45, 172.67.216.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ethenafi.team
- Registered
- 2026-08-22 · Spaceship, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- www.ethena-fi.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.ListedPhishing hostUnder ethena-fi.icu, listed by MetaMask · Address hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 7 mo ago
DetailsHide details for www.ethena-fi.icu
- Hostname
- www.ethena-fi.icu
- First seen
- 2026-11-01 20:46 UTC
- First published
- 2026-11-01 21:34 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 21:47 UTC
- Listed
- MetaMask, listing ethena-fi.icu and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
- Phishing-host list fetched with the address
- Resolved to 91.199.133.247
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-01 19:44 UTC to 2027-01-30 19:44 UTCLogged 2026-11-01 20:42 UTC in DigiCert Wyvern2027h1, entry 375,460,873SHA-256 3545b8821400a1d54197df1d7b03950b1ff6ac8ff3b20a9eae875fe75dc354a9Public key SHA-256 46478bf2b2f7eda0820270f3eabbe23f2864f2f4da2263edd78d688ea612cfd5
- Brand
- Ethena
- Addresses
- 91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- Domain
- ethena-fi.icu
- Registered
- 2026-04-07 · Fewmoretaps OU d/b/a Trustname.com
- MX
- Receives mail at mx.ethena-fi.icu
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 00:15 UTC
- ethena-fi.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.ListedPhishing hostListed by MetaMask · Address hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 7 mo ago
DetailsHide details for ethena-fi.icu
- Hostname
- ethena-fi.icu
- First seen
- 2026-11-01 20:46 UTC
- First published
- 2026-11-01 21:34 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 21:47 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
- Phishing-host list fetched with the address
- Resolved to 91.199.133.247
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-01 19:44 UTC to 2027-01-30 19:44 UTCLogged 2026-11-01 20:42 UTC in DigiCert Wyvern2027h1, entry 375,460,873SHA-256 3545b8821400a1d54197df1d7b03950b1ff6ac8ff3b20a9eae875fe75dc354a9Public key SHA-256 46478bf2b2f7eda0820270f3eabbe23f2864f2f4da2263edd78d688ea612cfd5
- Brand
- Ethena
- Addresses
- 91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- Domain
- ethena-fi.icu
- Registered
- 2026-04-07 · Fewmoretaps OU d/b/a Trustname.com
- MX
- Receives mail at mx.ethena-fi.icu
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 00:15 UTC
- 4-governance-ethenafi.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for 4-governance-ethenafi.pages.dev
- Hostname
- 4-governance-ethenafi.pages.dev
- First seen
- 2026-11-01 17:47 UTC
- First published
- 2026-11-01 18:03 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 18:08 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by Cloudflare TLS Issuing ECC CA 4 · precertificateValid 2026-11-01 08:52 UTC to 2027-01-30 09:00 UTCLogged 2026-11-01 09:02 UTC in DigiCert Wyvern2027h1, entry 372,483,926SHA-256 1846904e6be82888f54288a65adf6af1b75da992e31271b4f8d2cd2f1fbde367Public key SHA-256 ac81a2f7a0bad579303b821ab051e8f5cb206f5c632e1868cb2542c00b8f7132
- Brand
- Ethena
- Addresses
- 172.66.44.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2c952606:4700:310c::ac42:2f6b
- Cloudflare
- Cloudflare (172.66.44.149, 172.66.47.107): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- season7-ethena.pro US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
DetailsHide details for season7-ethena.pro
- Hostname
- season7-ethena.pro
- First seen
- 2026-11-01 14:05 UTC
- First published
- 2026-11-01 14:12 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 14:20 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36 · precertificateValid 2026-11-01 00:00 UTC to 2027-01-18 11:29 UTCLogged 2026-11-01 14:02 UTC in IPng Networks Halloumi2027h1, entry 330,146,930SHA-256 048dd1d86904a4f424dbe8b345315f72a51ebb3339a6b3606e2e81359cea1f3dPublic key SHA-256 94de7231bb746e4ae881b8871cf58e99145685c105399d60d62edf2e199e5018
- Brand
- Ethena
- Addresses
- 104.21.78.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.220.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:dc352606:4700:3035::6815:4e64
- Cloudflare
- Cloudflare (104.21.78.100, 172.67.220.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- season7-ethena.pro
- Registered
- 2026-08-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 00:04 UTC
- 3-governance-ethenafi.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for 3-governance-ethenafi.pages.dev
- Hostname
- 3-governance-ethenafi.pages.dev
- First seen
- 2026-11-01 11:50 UTC
- First published
- 2026-11-01 13:04 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Not resolving since 2026-11-02 · checked 2026-11-04 13:09 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-31 09:14 UTC to 2027-01-29 09:14 UTCLogged 2026-10-31 10:12 UTC in Let's Encrypt Willow2027h1, entry 862,759,558SHA-256 4f3db4646dc8a5f7c3ca200de6a50deaa61d469741eef224f85f9f2042c85193Public key SHA-256 2fe783c436cd40ab96b6b163187b2485a1a760004e882fee40306c9e48e289a7
- Brand
- Ethena
- Addresses
- 172.66.44.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2c7c2606:4700:310c::ac42:2f84
- Cloudflare
- Cloudflare (172.66.44.124, 172.66.47.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- apps-ethena.xyz US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
DetailsHide details for apps-ethena.xyz
- Hostname
- apps-ethena.xyz
- First seen
- 2026-11-01 08:05 UTC
- First published
- 2026-11-01 09:09 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · delisted on 2026-11-03PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 09:21 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-01 07:03 UTC to 2027-01-30 07:03 UTCLogged 2026-11-01 08:01 UTC in IPng Networks Gouda2027h1, entry 284,266,125SHA-256 017ba5a527c3d15e8762bd47d4806a0b1f4002ea2c9a8ea4d54e86db311bfb4fPublic key SHA-256 97e285600cdc2cd17fdb6445aea3c9178925497aa35685fba0b90a84c53108da
- Brand
- Ethena
- Addresses
- 104.21.22.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.205.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:16852606:4700:3037::ac43:cd16
- Cloudflare
- Cloudflare (104.21.22.133, 172.67.205.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- apps-ethena.xyz
- Registered
- 2026-03-10 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 10:04 UTC
- 2-governance-ethenafi.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for 2-governance-ethenafi.pages.dev
- Hostname
- 2-governance-ethenafi.pages.dev
- First seen
- 2026-10-31 11:44 UTC
- First published
- 2026-10-31 11:51 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Not resolving since 2026-11-01 · checked 2026-11-04 11:55 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by Cloudflare TLS Issuing ECC CA 4 · precertificateValid 2026-10-30 19:03 UTC to 2027-01-28 19:10 UTCLogged 2026-10-30 19:13 UTC in DigiCert Wyvern2027h1, entry 362,359,915SHA-256 3a59b1890f13b48e26fba4e318f54397a0969cfad588ef7df3cb23dbdaa3d952Public key SHA-256 8e774b71b5b65cf76df9cb32510d58cb32107556b780af3ca5888b5087132179
- Brand
- Ethena
- Addresses
- 172.66.44.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2c432606:4700:310c::ac42:2fbd
- Cloudflare
- Cloudflare (172.66.44.67, 172.66.47.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- fnd-ethena.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 19 d ago
DetailsHide details for fnd-ethena.com
- Hostname
- fnd-ethena.com
- First seen
- 2026-10-31 11:21 UTC
- First published
- 2026-10-31 11:51 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 11:55 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36Valid 2026-10-31 00:00 UTC to 2027-01-19 11:26 UTCLogged 2026-10-31 11:15 UTC in Geomys Tuscolo2027h1, entry 419,086,807SHA-256 160ce03a064090bd4078b7638a32659c6d823c550b2f344b369844a5240e701fPublic key SHA-256 56f5b784646d08029eda610f1731e9f81c94d35293b757aea4e9f564f2f53695
- Brand
- Ethena
- Addresses
- 104.21.25.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.25.133, 172.67.134.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- fnd-ethena.com
- Registered
- 2026-10-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- 1-governance-ethenafi.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for 1-governance-ethenafi.pages.dev
- Hostname
- 1-governance-ethenafi.pages.dev
- First seen
- 2026-10-30 23:42 UTC
- First published
- 2026-10-30 23:53 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-04 23:58 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-30 11:04 UTC to 2027-01-28 11:04 UTCLogged 2026-10-30 12:02 UTC in Let's Encrypt Sycamore2027h1, entry 855,324,445SHA-256 005f5f452a93f54307cbc7fe4ebd30a6d2081434a811e0e87eb133c3aa944a79Public key SHA-256 bdba5c79acffb77c7ad70554c08696125cd3f84c5098a56f6b0bdcde4b6c4be9
- Brand
- Ethena
- Addresses
- 172.66.44.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2c4a2606:4700:310c::ac42:2fb6
- Cloudflare
- Cloudflare (172.66.44.74, 172.66.47.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- governance-ethenafi.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for governance-ethenafi.pages.dev
- Hostname
- governance-ethenafi.pages.dev
- First seen
- 2026-10-30 17:41 UTC
- First published
- 2026-10-30 18:07 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-04 18:13 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-30 01:47 UTC to 2027-01-28 01:47 UTCLogged 2026-10-30 02:46 UTC in DigiCert Wyvern2027h1, entry 355,250,096SHA-256 a67c3698c76156e6091b786e08d8dc2a0ede059847d5f43777da7cd96c21ce08Public key SHA-256 5a4638f017c2d29e93c5c21e9addd9b5ce17936ce235c7a3fa42f7e5883aa20b
- Brand
- Ethena
- Addresses
- 172.66.44.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2c4d2606:4700:310c::ac42:2fb3
- Cloudflare
- Cloudflare (172.66.44.77, 172.66.47.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- governance-ethenafi.icu US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 d ago
DetailsHide details for governance-ethenafi.icu
- Hostname
- governance-ethenafi.icu
- First seen
- 2026-10-30 11:41 UTC
- First published
- 2026-10-30 11:47 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 11:51 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-10-30 01:49 UTC to 2027-01-28 01:49 UTCLogged 2026-10-30 02:48 UTC in Geomys Tuscolo2027h1, entry 402,236,430SHA-256 19b17f23ad7a7b1590306a81d434d541f79a73b58f5d0b2ee06d8b05d6d142eaPublic key SHA-256 a9523a073820eae9bfc26e57841b543acd350e9ea1e43fda2dd4d62c07f53fd2
- Brand
- Ethena
- Addresses
- 104.21.41.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.189.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:29422606:4700:3037::ac43:bdc4
- Cloudflare
- Cloudflare (104.21.41.66, 172.67.189.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- governance-ethenafi.icu
- Registered
- 2026-10-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- 15-ethena.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for 15-ethena.pages.dev
- Hostname
- 15-ethena.pages.dev
- First seen
- 2026-10-29 17:40 UTC
- First published
- 2026-10-29 18:29 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 18:34 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-29 07:14 UTC to 2027-01-27 07:14 UTCLogged 2026-10-29 08:12 UTC in Geomys Tuscolo2027h1, entry 392,460,045SHA-256 3f0108467abb26f70416dfa15afe6368ab80fcb28448c1e7c766d69c43c86b44Public key SHA-256 6c23f1532615cf9dfd05213ae62303fffbddda527222ec77a175a91f68e66f37
- Brand
- Ethena
- Addresses
- 172.66.44.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2c812606:4700:310c::ac42:2f7f
- Cloudflare
- Cloudflare (172.66.44.129, 172.66.47.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- events-ethena.xyz US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
DetailsHide details for events-ethena.xyz
- Hostname
- events-ethena.xyz
- First seen
- 2026-10-29 14:41 UTC
- First published
- 2026-10-29 15:21 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 15:33 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-10-29 13:41 UTC to 2027-01-27 13:41 UTCLogged 2026-10-29 14:40 UTC in DigiCert Sphinx2027h1, entry 307,247,535SHA-256 171e7bd92d1737e93f455cdac093e1d26a2828eb735286a50dea3bec1df2c976Public key SHA-256 378fa9356d2691f866fe4d3a94079915cf67ae813d3be90cccd84f8d87540d79
- PhishDestroy
- Brand
- Ethena
- Addresses
- 104.21.27.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.169.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.27.174, 172.67.169.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- events-ethena.xyz
- Registered
- 2026-03-07 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- 13-ethena.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for 13-ethena.pages.dev
- Hostname
- 13-ethena.pages.dev
- First seen
- 2026-10-29 11:38 UTC
- First published
- 2026-10-29 11:56 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Not resolving since 2026-10-30 · checked 2026-11-04 12:02 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-28 17:24 UTC to 2027-01-26 17:24 UTCLogged 2026-10-28 18:22 UTC in Google ParcelYard2027h1, entry 492,887,600SHA-256 e282c55469ce00f9b85f5ca0cab3851adfb4d098aec048404207e9df8a5fff76Public key SHA-256 7b313b03b8b08fe6810f3495551714b6f9bfd3afab58ed5f1b65a7199bd104dd
- Brand
- Ethena
- Addresses
- 172.66.44.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2ca22606:4700:310c::ac42:2f5e
- Cloudflare
- Cloudflare (172.66.44.162, 172.66.47.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- 12-ethena.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for 12-ethena.pages.dev
- Hostname
- 12-ethena.pages.dev
- First seen
- 2026-10-28 23:38 UTC
- First published
- 2026-10-29 00:30 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Not resolving since 2026-10-30 · checked 2026-11-05 00:40 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-28 15:29 UTC to 2027-01-26 15:29 UTCLogged 2026-10-28 16:27 UTC in Google PlumbersArms2027h1, entry 492,067,857SHA-256 37ec593c3dc98fe04abc164d5dd118efe3c39291a39fc123646ece438d8a853ePublic key SHA-256 7925f9c6b224a353bb803b731eb940056766f0a5e210b827dd3ec52c40000a7a
- Brand
- Ethena
- Addresses
- 172.66.45.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.46.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2d162606:4700:310c::ac42:2eea
- Cloudflare
- Cloudflare (172.66.45.22, 172.66.46.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- 10-ethena.pages.dev US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMask
DetailsHide details for 10-ethena.pages.dev
- Hostname
- 10-ethena.pages.dev
- First seen
- 2026-10-28 18:31 UTC
- First published
- 2026-10-28 19:20 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Not resolving since 2026-10-28 · checked 2026-11-04 19:31 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-28 17:29 UTC to 2027-01-26 17:29 UTCLogged 2026-10-28 18:27 UTC in Google PlumbersArms2027h1, entry 493,631,834SHA-256 cb6ee35cf66d8e63f40e683fccac7108fe1b38a1acad1e87f59146d2ca220c3cPublic key SHA-256 9a96d460d5700da6a814540921ef28d1876d8911e5e31479bcef3d0bcdf8531f
- Brand
- Ethena
- Addresses
- 172.66.45.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.46.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (172.66.45.42, 172.66.46.214): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- 11-ethena.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for 11-ethena.pages.dev
- Hostname
- 11-ethena.pages.dev
- First seen
- 2026-10-28 17:37 UTC
- First published
- 2026-10-28 18:18 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 18:30 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-28 11:04 UTC to 2027-01-26 11:04 UTCLogged 2026-10-28 12:02 UTC in Geomys Tuscolo2027h1, entry 381,713,568SHA-256 235cad208c619ba96acde4921d350e3f2f6c7d81d46c6d069cf008fdba3bcbc4Public key SHA-256 0874888f750c80f94b765cbe3f6d7cff4ff270173cc10c6b1f48f09321753119
- Brand
- Ethena
- Addresses
- 172.66.44.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2c5d2606:4700:310c::ac42:2fa3
- Cloudflare
- Cloudflare (172.66.44.93, 172.66.47.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- connect.ethena-rewardhub.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…ReportedParking page · ParkingCrew (Team Internet)Under ethena-rewardhub.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
DetailsHide details for connect.ethena-rewardhub.com
- Hostname
- connect.ethena-rewardhub.com
- First seen
- 2026-10-28 10:41 UTC
- First published
- 2026-10-28 11:02 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 11:08 UTC
- Reported
- PhishDestroy, listing ethena-rewardhub.com and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-10-28 09:40 UTC to 2027-01-26 09:40 UTCLogged 2026-10-28 10:39 UTC in Let's Encrypt Willow2027h1, entry 813,151,708SHA-256 388e62adaeb40be244d0e4788cd0dae81f62f9a06ce7eb9119affba09a9de90fPublic key SHA-256 80e390dfbbcf056d562c13a64628f55b144ba715e7a403a0742ea7b41c958e2a
- PhishDestroy
- Brand
- Ethena
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Domain
- ethena-rewardhub.com
- Registered
- 2025-12-17 · Hosting Concepts B.V. d/b/a Registrar.eu
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:44 UTC
- vote-ethena.pro US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
DetailsHide details for vote-ethena.pro
- Hostname
- vote-ethena.pro
- First seen
- 2026-10-28 07:51 UTC
- First published
- 2026-10-28 08:43 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 09:07 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-10-28 06:48 UTC to 2027-01-26 07:47 UTCLogged 2026-10-28 07:48 UTC in DigiCert Wyvern2027h1, entry 331,184,545SHA-256 4342cf83517468307a1384f4666b49753b7d8a8a4feb915f10adbcf528a81567Public key SHA-256 21f912a69456c6f331ac5ec803f6832c153ef201cbc10c8d4e91549ea7fcbee9
- Brand
- Ethena
- Addresses
- 104.21.38.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.137.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.38.175, 172.67.137.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- vote-ethena.pro
- Registered
- 2026-08-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:44 UTC
- ethenafi.cfd US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
DetailsHide details for ethenafi.cfd
- Hostname
- ethenafi.cfd
- First seen
- 2026-10-27 05:37 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 09:05 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- We matched the new listing
- Certificate logged in CT
- Latest DNS check
- Certificate
- Issued by Cloudflare TLS Issuing ECC CA 4 · precertificateValid 2026-10-29 07:40 UTC to 2027-01-24 07:12 UTCLogged 2026-10-29 07:50 UTC in DigiCert Wyvern2027h1, entry 344,799,899SHA-256 72d5753598ccf7d8f4c281e0268c58d30dca3be84fa486f63a4a81f496e95592Public key SHA-256 c9147cffe5fcee952854a16bbca955e929cfd12374715888375c51dd4fcfe63c
- Brand
- Ethena
- Addresses
- 104.21.81.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.188.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.81.48, 172.67.188.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ethenafi.cfd
- Registered
- 2026-08-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:26 UTC
- ethenafi.info US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for ethenafi.info
- Hostname
- ethenafi.info
- First seen
- 2026-10-27 05:37 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 09:06 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Brand
- Ethena
- Addresses
- 104.21.79.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.146.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:4f8a2606:4700:3031::ac43:920b
- Cloudflare
- Cloudflare (104.21.79.138, 172.67.146.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ethenafi.info
- Registered
- 2026-06-30 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:26 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Ethena when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

