solrecover[.]xyz

solrecover.xyz was registered on February 21 2026 through NameSilo, LLC. The site resolves to the IPv4 address 45.9.148.106, which is announced by AS49447 Nice IT Services Group Inc. and geolocated to the Netherlands. The hosting infrastructure uses the nameservers ns1.ns306.parklogic.com and ns2.ns306.parklogic.com, and the TLS certificate received a rating of R10, indicating a low‑trust certificate. An HTTP request returns status code 200, confirming that the web server is actively delivering content. The page title presented to visitors reads "Claim Free Sol No.1 Solana Burner High Affiliate Commissions", explicitly referencing the Solana brand and promising free SOL tokens, which aligns with the reported brand‑impersonation and crypto‑scam activity.

Reputation services assign extremely low trust scores: Gridinsoft rates the domain 0 out of 100, and Scamadviser scores it 1 out of 100. The domain appears on two dedicated blocklists, PhishDestroy and ScamSniffer, and a VirusTotal scan shows four of ninety‑three antivirus engines flagging the site as malicious. These indicators collectively demonstrate that solrecover.xyz is being used to deceive users seeking Solana assets and to generate affiliate revenue through fraudulent claims.

The precise mechanics of the scam, such as any credential‑harvesting forms or wallet‑address collection, have not been publicly disclosed, so the full attack vector remains uncertain. Defenders should block the domain and the associated IP address at network perimeters, add the domain to URL filtering and safe‑browsing lists, and monitor for similar URLs that reference Solana or promise free cryptocurrency. Users should be advised that any unsolicited offers of free SOL from solrecover.xyz are fraudulent, and that legitimate Solana services never request such actions.