stableorbit[.]app

This domain is flagged as a brand impersonation threat targeting Solana ecosystem users through a fraudulent on-chain interaction interface. Analysis of stableorbit.app reveals it presents itself as a legitimate Solana wallet portal under the page title 'Solana Spin Interface | On-Chain Interaction Session,' designed to deceive users into entering sensitive credentials or approving malicious transactions. The infrastructure mimics authentic Solana services, increasing the likelihood of successful social engineering attacks against cryptocurrency holders and developers interacting with decentralized applications. Infrastructure analysis provides concrete evidence of malicious intent. The domain was registered through Namecheap Inc. on April 30, 2026, an unusually future-dated creation that suggests registry manipulation or fraudulent registration practices. It resolves to IP address 188.114.96.3 and is blocked by three security blocklists, including MetaMask and PhishDestroy. VirusTotal detection shows 2 out of 95 security vendors flagging the domain, while Gridinsoft assigns a trust score of 0/100. Technologies detected include Node.js, Vue.js, Nuxt.js, and tracking pixels from Google Analytics and Facebook, indicating a sophisticated frontend designed to harvest user data and interaction patterns. Users who visited stableorbit.app should take immediate action to mitigate potential compromise. Disconnect any active wallet sessions associated with the domain and revoke all transaction approvals granted through the interface. Scan local devices for malware, particularly browser extensions or scripts that may have been installed during interaction. Monitor Solana wallet addresses for unauthorized transactions and consider migrating assets to new addresses if credentials were entered. Report the domain to relevant security teams and cryptocurrency platforms to prevent further exploitation. The elevated risk level and offline status suggest the campaign may have concluded, but residual threats from collected data could persist.