excoinonsol[.]lol

PhishDestroy identifies excoinonsol.lol as an active crypto drainer scam designed to trick users into connecting cryptocurrency wallets, enabling unauthorized transfers of digital assets. The domain mimics legitimate cryptocurrency exchange interfaces, luring victims into signing malicious transactions that drain wallet funds. Security research confirms this domain is engineered for direct financial exploitation, presenting an immediate threat to users engaging with its fraudulent portals. This domain was flagged by 2 out of 95 VirusTotal security vendors, indicating limited but noteworthy detection coverage. Registered on May 14, 2026, via NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain leverages a Let's Encrypt SSL certificate to appear legitimate. Its backend infrastructure resolves to IP address 188.114.97.3, a known hosting environment associated with previous malicious campaigns. Users who visited excoinonsol.lol should immediately disconnect any connected wallets, revoke suspicious permissions via blockchain explorers, and scan devices for malware. Avoid interacting with this domain entirely—report it to your security team or block it at the network level. If financial loss occurs, contact your wallet provider and local cybercrime authorities immediately.