Analysis of supernova-dex.com indicates a recently registered domain exhibiting characteristics consistent with phishing activity targeting cryptocurrency users. The domain was created on July 24, 2026, and remains active as of July 28, 2026. Infrastructure analysis reveals the domain resolves to the IP address 186.2.175.109, with nameservers configured under ares.trustname.com, ns1.anycastdns.cz, ns2.anycastdns.cz, and zeus.trustname.com. The domain was registered through Fewmoretaps OU, operating under the Trustname.com registrar.
Security telemetry shows the domain appears on one blocklist, specifically PhishDestroy, while no detections were reported by the 91 vendors that scanned the domain on VirusTotal at the time of analysis. The absence of detections does not confirm the domain's safety, particularly given its recent registration and presence on a security blocklist. No additional context regarding the specific phishing kit, targeted brand, or exact content of the site is currently available, as the page has not been fully analyzed for visual or functional indicators. Defenders are advised to treat supernova-dex.com as a potential threat, particularly in environments where cryptocurrency-related activity occurs.
Network-level blocking at the domain and IP level is recommended, along with monitoring for connections to 186.2.175.109. Further investigation into the domain's hosting provider and associated infrastructure may reveal additional linked threats. Given the domain's recent creation and active status, continued monitoring for updates in detection coverage and blocklist inclusion is warranted.