boomxxx[.]biz

The domain boomxxx.biz is flagged as a brand impersonation threat targeting Solana users. It is currently offline and has been identified as a potential risk. The domain impersonates Solana by using the page title 'Trojan - The Ultimate On-Chain Trading Experience,' which may mislead users into believing it is an official or legitimate service.

Analysis indicates that boomxxx.biz has been flagged by 2 of 95 security vendors on VirusTotal, suggesting a moderate level of detection. The domain is registered through Global Domain Group LLC and resolves to the IP address 172.67.184.53. It was created on February 21, 2026, and is listed on 1 security blocklist. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting visitors. The Gridinsoft trust score for this domain is 0/100, indicating a significant lack of trustworthiness. The technologies detected on the site include Node.js, Vue.js, Nuxt.js, and Cloudflare services, which are commonly used in legitimate web applications but can also be employed to create sophisticated phishing sites.

Given the current offline status of boomxxx.biz, the immediate risk to users is reduced. However, the domain's history and technical setup suggest it was designed to deceive Solana users. Security teams are advised to monitor this domain for any signs of reactivation. Users should be educated to verify the URLs of Solana-related services and to avoid clicking on links from untrusted sources. Additionally, implementing DNS-based blocking and using security solutions that can detect and block such impersonation attempts can further mitigate the risk. Regularly updating security policies and conducting phishing awareness training can also help prevent similar threats.