solunexbit[.]com

PhishDestroy has identified solunexbit.com as a confirmed brand impersonation phishing domain targeting Ethereum users. The site, which presented itself as a cryptocurrency exchange under the title 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Exchange', was designed to deceive visitors into believing it was a legitimate platform, likely to harvest credentials or funds. No specific drainer kit was identified, but the site's structure and branding clearly indicate a phishing operation aimed at Ethereum holders.

Technical analysis reveals that solunexbit.com was registered through Web Commerce Communications Limited on February 21, 2026, and resolved to IP address 104.21.44.89. VirusTotal flagged the domain with a score of 1 out of 95 security vendors, and it appears on one security blocklist. The SSL certificate was issued by Google Trust Services (WE1), and the domain was not listed on Google Safe Browsing at the time of analysis. These indicators, while not overwhelmingly malicious in terms of vendor detection, are consistent with a targeted phishing campaign that evades broad detection.

As of the latest report, solunexbit.com has been taken offline, mitigating immediate risk to users. However, the domain remains a threat because similar sites may reappear under different names. Users who interacted with this site should change any credentials used and monitor accounts for suspicious activity. PhishDestroy recommends avoiding unsolicited links to cryptocurrency exchanges and always verifying URLs independently. The seed for this report is bf8432.