ethena.fi

HTML metadata

Title: Ethena
Description: Ethena is a synthetic dollar protocol built on Ethereum that provides a crypto-native solution for money not reliant on traditional banking system infrastructure, alongside a globally accessible dollar denominated rewards instrument - the 'Internet Bond'.
Language: en

Open Graph

url: https://ethena.fi
title: Ethena
locale: en_US
site name: Ethena
description: Enabling Internet Money

Technology

CDN: Vercel
CMS: Next.js

Third-party hosts loaded (11)

arb1.arbitrum.io×1
cloudflare-eth.com×1
eth.public-rpc.com×1
ethereum-rpc.publicnode.com×1
lb.drpc.live×1
pulse.walletconnect.org×1
raw.githubusercontent.com×1
rpc.ankr.com×1
rpc.hyperliquid.xyz×1
us-assets.i.posthog.com×1
us.i.posthog.com×1

Social

Registration

Created

2023-05-23

Name servers

ns-172.awsdns-21.com [ok]
ns-1774.awsdns-29.co.uk [ok]
ns-1376.awsdns-44.org [ok]
ns-781.awsdns-33.net [ok]

DNS records live

NS

ns-1376.awsdns-44.org
ns-172.awsdns-21.com
ns-1774.awsdns-29.co.uk
ns-781.awsdns-33.net

TXT

teamtailor=54a08919282f3b787091e95362ea4422
14031da5-1831-417b-a49b-8e50f1092e37=5ef5eb1b694e284ea00f9c1c5b7a2dd054e6a4f4c586183b1600a9e787c14cc4

Verified for

Google

Email authentication no MX

SPF

v=spf1 -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarcreports@ethenalabs.xyz

policy: reject (enforced)

DKIM

Show 12 DKIM selectors

default: v=DKIM1; p=
google: v=DKIM1; p=
selector1: v=DKIM1; p=
selector2: v=DKIM1; p=
k1: v=DKIM1; p=
k2: v=DKIM1; p=
mail: v=DKIM1; p=
dkim: v=DKIM1; p=
s1: v=DKIM1; p=
s2: v=DKIM1; p=
mxvault: v=DKIM1; p=
smtpapi: v=DKIM1; p=

selectors probed

Certificate (current)

R13

from 2026-04-21 to 2026-07-20

Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://ethena.fi/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), interest-cohort=(), payment=(self), usb=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'nonce-Q1fOc3OFL9_WOZ2wlc5ubw' 'strict-dynamic' 'unsafe-eval' https://*.posthog.com https://tag.adrsbl.io https://cdn.id5-sync.com https://va.vercel-scripts.com/v1/script.debug.js https://va.vercel-scripts.com/v1/speed-insights/script.debug.js https://us-assets.i.posthog.com/static/dead-clicks-autocapture.js https://us-assets.i.posthog.com/array/ https://us-assets.i.posthog.com/array https://us-assets.i.posthog.com/static/toolbar.js https://us-assets.i.posthog.com/static/surveys.js https://connectors.walletconnect.org wss://*.walletconnect.org 'wasm-unsafe-eval' https://vercel.live; img-src 'self' blob: data: gap: https://app.hyperliquid.xyz https://app.hyperunit.xyz https://canarytokens.com https://explorer-api.walletconnect.com https://static.okx.com https://app.ethena.fi https://walletconnect.org https://walletconnect.com https://secure.walletconnect.com https://secure.walletconnect.org https://tokens-data.1inch.io https://tokens.1inch.io https:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin-allow-popups