quarexbit[.]com

The domain quarexbit.com is a confirmed phishing site engaged in brand impersonation targeting Ethereum users. It presents itself as a cryptocurrency exchange under the name 'QUAREXBIT' to deceive victims into believing it is a legitimate platform for buying and selling Bitcoin and Ethereum. The site does not employ a known drainer kit but operates as a scam to steal cryptocurrency. As of the latest verification, quarexbit.com has been taken offline.

Technical analysis reveals that quarexbit.com was flagged by 1 of 95 security vendors on VirusTotal, including Webroot, and appears on 1 security blocklist (PhishDestroy). The domain was registered through Web Commerce Communications Limited on February 21, 2026, and resolves to the IP address 172.67.148.152, hosted by Cloudflare, Inc. in the United States. The SSL certificate is issued by Google Trust Services (WE1), and the observed page title is 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | QUAREXBIT'. Nameservers associated with the domain are gail.ns.cloudflare.com and langston.ns.cloudflare.com. Google Safe Browsing has not flagged the domain.

Individuals who interacted with quarexbit.com should immediately move any cryptocurrency funds to a new wallet and revoke any token approvals granted to the site. If credentials were entered, change passwords on all associated accounts and enable two-factor authentication. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to assist in broader mitigation efforts. Victims may also contact their local cybercrime unit or the impersonated brand (Ethereum) to report the incident.