# discord.refundyoursol.com — SUSPICIOUS

> Discord.refundyoursol.com is a crypto-draining phishing site that impersonates Discord and was flagged by 3 of 95 VirusTotal scanners on day one.

## Summary
PhishDestroy identifies discord.refundyoursol.com as an active crypto-draining phishing page posing as a Discord refund portal.

This domain was flagged by 3 out of 95 VirusTotal security vendors, registered through Namecheap Inc on January 13, 2025, and resolves to IP 172.66.40.217. It also holds a Google Trust Services SSL certificate, adding a false veneer of legitimacy.

If you visited discord.refundyoursol.com, stop interacting immediately. Disconnect your wallet or revoke any connected permissions via your wallet settings. Run a malware scan on your device and change passwords for critical accounts. Report the domain to PhishDestroy for blocking and share the warning with your Discord community to prevent further victims.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-01-13 02:33:54
- Registrar: NAMECHEAP INC
- IP: 172.66.40.217

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/33aee68c-4fcf-44ce-8f30-50d1ab7d164f
- PhishDestroy: https://phishdestroy.io/domain/discord.refundyoursol.com/
- LLM endpoint: https://phishdestroy.io/domain/discord.refundyoursol.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/discord.refundyoursol.com/
Last updated: 2026-03-30