airdrop[.]solgraph[.]app

This domain, airdrop.solgraph.app, is flagged as an elevated-risk phishing infrastructure specifically designed for brand impersonation targeting DexScreener, a cryptocurrency analytics platform. Analysis indicates the site employs deceptive tactics, including a fraudulent airdrop scheme under the guise of a legitimate token ($GRAPH) and versioned page titles (SolGraph - $GRAPH | V2.0), to lure victims into disclosing sensitive credentials or transferring digital assets. Infrastructure analysis reveals the domain resolves to the IP address 185.146.167.202 and was registered through Hosting Concepts B.V. d/b/a Registrar.eu. It is currently offline but was previously detected by 2 out of 95 security vendors on VirusTotal, appearing on at least one security blocklist. The domain earned a trust score of 0/100, indicating high confidence in its malicious nature. Technologies detected on the site include YouTube embeds, Apache HTTP Server, and StackPath CDN, which may have been leveraged to enhance legitimacy or obfuscate malicious activity. Mitigation against this threat involves several technical and procedural steps. Network defenders should block the domain and its associated IP (185.146.167.202) at the perimeter, including DNS and web filtering solutions. End users should be educated to recognize brand impersonation tactics, such as spoofed page titles and fraudulent airdrop claims, particularly those mimicking cryptocurrency platforms. Organizations handling digital assets should enforce multi-factor authentication and restrict interactions with unverified domains, especially those registered through high-risk registrars or exhibiting low trust scores. Monitoring for similar domains using the same infrastructure or naming patterns (e.g., solgraph.app) is recommended to preempt further phishing campaigns.