surnexis[.]com

Analysis of surnexis.com indicates that the domain was registered on February 27 2026 through Hostinger operations, UAB and is hosted on an IP address (92.113.16.66) owned by AS47583 Hostinger International Limited, located in Germany. The domain resolves to nameservers ns1.dns-parking.com and ns2.dns-parking.com, typical of parked or quickly provisioned domains. No TLS certificate is presented, meaning the site is served over plain HTTP, which reduces credibility and facilitates man‑in‑the‑middle interception. The page title returned from the site, “Surnexis Token | Official Website – Secure Presale & High Bonus Rewards”, suggests a cryptocurrency presale offering, and the classification as “Brand Impersonation” aligns with attempts to lure investors under the guise of a legitimate token project.

VirusTotal reports that 2 of 93 scanned security vendors flagged the domain, and the domain appears on a single active blocklist, specifically PhishDestroy, confirming that at least one commercial phishing mitigation service has taken it down. The current status is recorded as offline, indicating that the hosting provider has removed the site or the domain is otherwise inaccessible. Uncertainty remains regarding the specific phishing kit or payload used, as no additional forensic evidence such as captured URLs, scripts, or credential‑phishing forms has been released.

Defenders should continue to monitor the domain, block the IP address 92.113.16.66 and the associated AS47583 in network‑level controls, and add surnexis.com to internal URL filtering and email gateways. Because the domain lacks a valid SSL certificate and is hosted on a generic parking service, any future re‑hosting attempts are likely to reuse the same infrastructure, so periodic re‑resolution checks are advised.