solscan[.]io-explorer[.]at

This domain impersonates a legitimate Solana blockchain explorer to deceive users into entering sensitive credentials or wallet information. The site mimics the appearance and functionality of the official Solana explorer, potentially tricking victims into disclosing private keys, seed phrases, or other authentication details. Such attacks often lead to unauthorized access to cryptocurrency wallets, resulting in financial loss or data compromise. Analysis indicates the domain was created on May 24, 2026, and is hosted on IP address 185.53.179.136. It is flagged by 4 out of 95 security vendors on VirusTotal, with detection labels including phishing and brand impersonation. The domain appears on three security blocklists and is blocked by multiple threat intelligence feeds. Infrastructure analysis reveals the use of Nginx as the web server technology, and the registrar details are obscured through privacy protection services. If you visited this domain or interacted with its content, immediately disconnect the device from the network to prevent further data transmission. Clear browser cache, cookies, and saved credentials, and run a full system scan using updated security software. If wallet credentials or private keys were entered, transfer remaining assets to a new, secure wallet and revoke any connected dApp permissions. Monitor accounts for unauthorized transactions and report the incident to relevant security teams or blockchain support channels.