take-solan[.]app

The domain take-solan.app is an active phishing site engaged in brand impersonation targeting Solana users. It presents itself as a legitimate airdrop campaign, specifically 'SolDrop - Claim Your 15 SOL Airdrop,' to deceive victims into interacting with fraudulent content. As of the latest verification, take-solan.app remains operational and poses an elevated risk by exploiting the Solana brand to conduct airdrop scams, though no crypto drainer kit has been identified.

Technical indicators confirm the domain's malicious nature. take-solan.app is flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Gridinsoft, and appears on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and resolves to the IP address 188.114.97.3, hosted on Cloudflare's network (AS13335). The SSL certificate is issued by Let's Encrypt (E8), and the site employs technologies such as Smartsupp, Cloudflare Browser Insights, and HTTP/3. Despite these indicators, Google Safe Browsing has not flagged the domain.

Users who interacted with take-solan.app should assume their credentials or wallet interactions may be compromised. For crypto-related scams, revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. For credential phishing, change passwords immediately and enable two-factor authentication on affected accounts. Report the domain to platforms like Google Safe Browsing, MetaMask's phishing detection, and security blocklists such as PhishDestroy to aid in mitigation.