solscann[.]webflow[.]io

Analysis of solscann.webflow.io indicates it was a crypto-focused phishing domain flagged by multiple security mechanisms. The domain, registered on May 8, 2013, was hosted behind Cloudflare (AS13335) and resolved to 104.18.36.248, located in the US. The page title 'Solscann' suggests an association with cryptocurrency services, aligning with the classified scam type. As of July 24, 2026, the domain returns an HTTP 404 status, confirming it is offline, though its historical activity remains a concern.

The domain appears on one security blocklist, and nine of 93 security vendors on VirusTotal flagged it as malicious. SSL certification was provided by Google Trust Services (WE1), a common practice even among phishing sites to appear legitimate. Nameservers journey.ns.cloudflare.com and lamar.ns.cloudflare.com further tie the infrastructure to Cloudflare, which is frequently used to obscure hosting origins. The registrar, MarkMonitor, Inc., is a legitimate provider but does not preclude malicious use.

Defenders should treat this domain as compromised and block it at the network level. While the exact content of the phishing pages is not analyzed, the available indicators—scam classification, blocklist presence, and vendor detections—support its designation as a crypto scam. No evidence of active exploitation is present due to its offline status, but historical logs should be reviewed for connections to this domain.