solana[.]appscan[.]pro

The domain solana.appscan.pro was registered on February 21, 2026 and is currently taken offline. It resolves to the IP address 172.67.156.61, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No SSL certificate is presented for the site, and the HTTP service is no longer reachable, confirming the offline status at the time of analysis. The page title observed before takedown was "Solana Airdrop - Claim Your Free Tokens," indicating a crypto‑airdrop scam that directly impersonates the Solana brand.

The domain appears on three independent security blocklists—PhishDestroy, MetaMask, and SEAL—demonstrating that multiple threat intelligence providers have flagged it as malicious. VirusTotal reports that 16 of 95 scanned security vendors flagged the domain, providing additional corroboration of its malicious nature. The threat is categorized as a crypto scam, employing an airdrop kit to lure victims into disclosing private keys or transferring funds. While the domain’s registration details beyond the creation date are not disclosed, the available evidence confirms a high‑risk profile.

Defenders should block the domain at network perimeter appliances, update DNS filtering rules to include the three listed blocklists, and monitor for any residual traffic to the associated Cloudflare IP. Incident response teams should also review logs for connections to 172.67.156.61 and consider user education campaigns that warn of unsolicited Solana airdrop offers. Continued surveillance is advised to detect any re‑hosting of the same phishing kit under new domains.