xn-solscan[.]space

This domain, xn-solscan.space, is currently active and flagged as a high-risk brand impersonation threat. It was registered on September 30, 2025, through NameCheap, Inc., and resolves to IP address 198.54.115.222. The page title is Solscan, and the identified brand target is base, indicating the site likely attempts to mimic the Solscan blockchain explorer to deceive users, potentially targeting Base chain assets. VirusTotal shows 3 of 95 security vendors flagging the domain, and it appears on three security blocklists, including ScamSniffer, PhishDestroy, and BLP-Malware. AlienVault OTX lists it in 23 threat intelligence pulses, reflecting broad community awareness. The SSL certificate is issued by Sectigo Limited. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. Defenders should block this domain at the network and email gateway levels, monitor for associated subdomains or IP changes, and review logs for any user interactions, as the active status suggests ongoing phishing campaigns. The exact phishing mechanism (e.g., credential harvesting or crypto wallet drainer) is not confirmed from available data, but the combination of low trust score, multiple blocklists, and brand impersonation warrants immediate action to prevent credential theft or financial loss.