sorexsol[.]top

PhishDestroy identifies sorexsol.top as an active crypto phishing domain designed to harvest credentials from unsuspecting users. This domain poses a significant risk to cryptocurrency users, as it mimics legitimate wallet login interfaces to trick victims into surrendering private keys or seed phrases. This threat has been corroborated by multiple security vendors, with VirusTotal reporting detections from 3 out of 95 security engines. The domain was registered through Global Domain Group LLC on April 27, 2026, and has already been blocked by MetaMask and SEAL. Additionally, sorexsol.top appears on two separate security blocklists, further validating its malicious nature. Technical analysis reveals the domain resolves to IP address 188.114.97.3 and utilizes a Let's Encrypt SSL certificate, which may lend an air of legitimacy to its fraudulent activities. If you have visited sorexsol.top or entered any credentials on its pages, immediately revoke all associated wallet permissions and transfer funds to a new, secure wallet. Scan your device for malware using reputable antivirus software, as phishing domains often deploy additional payloads. Report this domain to your organization's SOC or trusted threat intelligence platforms to prevent further exploitation. Exercise extreme caution with any unsolicited links or pop-ups, especially those requesting cryptocurrency-related information.