solxbet[.]com

solxbet.com was registered on 21 February 2026 and began serving content that claimed to represent the Solana blockchain ecosystem, as indicated by the page title “Solana” and the explicit brand target of Solana. The site resolved to the IPv4 address 91.92.242.155, which is announced by AS202412 and is hosted by Omegatech LTD in the Netherlands. An SSL certificate identified as “R12” was presented, confirming that TLS was in use at the time of analysis. Automated scanning on VirusTotal returned nine positive detections out of ninety‑three submitted security vendors, and the domain is listed on a single public blocklist.

The phishing‑oriented mitigation service PhishDestroy has also recorded the domain as blocked. According to the intelligence feed, the page was classified as a “Crypto Scam,” aligning with the brand impersonation of Solana. The domain’s operational status is currently offline, and the risk rating has been assigned as elevated. Evidence confirms the infrastructure components, but the specific content served, such as login forms or malicious payloads, has not been captured because the site is no longer reachable.

Consequently, the exact tactics, techniques, and procedures employed by the actors remain uncertain. Defenders should continue to monitor the IP address 91.92.242.155 for any re‑use in future campaigns, enforce blocklist entries for the domain and its associated IP, and consider adding the certificate fingerprint to internal allow‑/deny lists. Organizations that interact with Solana‑related services should educate users about unsolicited requests referencing Solana and advise them to verify URLs against known official domains. Ongoing intelligence collection, including periodic re‑resolution of the domain and retrospective analysis of any archived HTTP responses, is recommended to refine detection rules and improve attribution.