solana-dashboard[.]me

Analysis of solana-dashboard.me indicates that the domain is currently offline but was actively used for a Solana wallet and seed phishing campaign. The site presented a page titled “DAMMv2 Dashboard,” a title that bears no direct relation to the Solana brand, suggesting the content was deliberately crafted to lure victims under the guise of a dashboard interface. Domain registration data shows the domain was created on August 13, 2025 through Tucows Domains Inc., and it is hosted on Amazon’s AS16509 network, resolving to IP address 216.150.16.1 located in the United States.

The authoritative nameservers are ns1.vercel-dns.com and ns2.vercel-dns.com, indicating the use of Vercel’s DNS service for rapid deployment. No TLS certificate was observed, meaning the site did not present HTTPS encryption, which is consistent with low‑trust infrastructure; the Gridinsoft trust score is 0 out of 100. Threat‑intelligence feeds have flagged the domain: 12 of 95 VirusTotal scanners raised alerts, it appears on one external blocklist, and PhishDestroy has recorded it as blocked.

The domain explicitly impersonates the Solana brand and is categorized as a wallet/seed phishing operation. While the site is no longer reachable, defenders should continue to block the domain and its associated IP, monitor for any re‑registration or similar Vercel‑based deployments, and update intrusion‑prevention signatures to capture the “DAMMv2 Dashboard” page title indicator. Ongoing vigilance is advised for any new domains that resolve to the same IP range or employ identical naming patterns, as attackers may recycle this infrastructure for future credential‑stealing campaigns.