67coin-sol[.]com

Analysis indicates that the domain 67coin-sol.com was registered on 10 September 2025 through Tucows Domains Inc. and is served from the Cloudflare network (AS13335) under the IP address 188.114.96.3 located in the United States. The site uses Cloudflare Browser Insights, HTTP/3, and presents a TLS certificate issued by Google Trust Services under the WE1 designation, confirming that the connection was secured with a valid public‑trust certificate. DNS resolution points to the authoritative nameservers nena.ns.cloudflare.com and piers.ns.cloudflare.com, both belonging to Cloudflare’s managed DNS service. The page title returned by the now‑offline site is "67 Coin," and the domain is explicitly listed as impersonating the Solana brand in the supplied intelligence.

This aligns with the classification of a crypto‑related scam that attempts to lure users by suggesting a connection to the Solana ecosystem. The domain appears on two independent security blocklists, PhishDestroy and ScamSniffer, and VirusTotal records indicate that two of ninety‑five scanning engines have flagged the host, providing additional confirmation of malicious intent. Current observations are limited to infrastructure and metadata; the content of the landing page has not been captured, and no further indicators such as malicious payload hashes or command‑and‑control endpoints have been disclosed. Consequently, the exact phishing vector, credential‑stealing forms, or wallet‑address collection mechanisms remain unknown.

Defenders should treat 67coin-sol.com as a confirmed brand‑impersonation threat and immediately block any DNS resolution or HTTP request to the identified IP address. Adding the domain to internal allow/deny lists, updating web‑filtering rules, and sharing the indicator set with threat‑intelligence platforms will help mitigate potential exposure. Continuous monitoring of Cloudflare‑hosted domains that resolve to 188.114.96.