bitxona[.]com

PhishDestroy identifies bitxona.com as a confirmed brand impersonation phishing site specifically targeting Ethereum, the well-known cryptocurrency platform. The domain is currently offline, but its threat potential remains significant. The site was designed to trick users into believing they were on a legitimate Ethereum trading and investment platform, likely aiming to steal login credentials, private keys, or other sensitive financial information.

Technical analysis reveals several red flags. The domain was created on April 22, 2025, which is very recent, and it resolves to IP address 75.119.153.221. VirusTotal reports that 1 out of 95 security vendors flagged this domain as malicious, indicating a low but present detection rate. It appears on 1 security blocklist and is registered through GMO Internet Group, Inc. d/b/a Onamae.com. The SSL certificate is issued by GoDaddy.com, Inc., which is a legitimate certificate authority, but this does not guarantee the site's trustworthiness—phishers often use valid SSL certificates to appear more credible.

Although the site has been taken offline, users who may have visited it before removal should be cautious. PhishDestroy recommends that anyone who interacted with bitxona.com change their Ethereum-related passwords immediately and enable two-factor authentication on their accounts. No personal or financial information should ever be entered on suspicious domains, and users should always verify the legitimacy of any platform by checking official sources and avoiding unsolicited links.