dapp-solayer[.]xyz

The domain dapp-solayer.xyz is identified as a brand_impersonation threat specifically targeting the Solana ecosystem. Analysis confirms it operates as a fraudulent staking platform, presenting itself as a legitimate Solana service under the name "Solayer | Solana Staking." The domain is currently offline, though prior activity indicates malicious intent to deceive users into disclosing sensitive credentials or transferring assets. Infrastructure analysis reveals multiple high-risk indicators. The domain was flagged by 6 of 95 security vendors on VirusTotal, registered through GoDaddy.com, LLC, and resolves to the IP address 186.2.175.35. It appears on three security blocklists and is referenced in two AlienVault OTX threat intelligence pulses. Additional red flags include a Gridinsoft trust score of 0/100 and the use of DDoS-Guard, a service frequently associated with bulletproof hosting. The page title and detected technologies (Bootstrap) further align with common phishing infrastructure patterns. Current status indicates the domain has been taken offline, likely due to enforcement actions or abandonment by the threat actor. However, users and organizations are advised to treat any prior or future interactions with this domain as compromised. Network defenders should block the domain and its associated IP (186.2.175.35) at the perimeter, while end-users should verify all Solana-related services through official channels only. Monitoring for similar impersonation domains (e.g., variations of "solayer") is recommended to mitigate recurring threats.