semerkapahana[.]shop

PhishDestroy identifies active brand impersonation at semerkapahana.shop, a malicious domain explicitly targeting Solana users through a counterfeit ‘SOLANA SPIN’ lottery scam. The page title mirrors Solana’s branding to deceive visitors into believing the offer is legitimate, while the underlying infrastructure leverages a Let’s Encrypt SSL certificate on 188.114.97.3 to establish superficial credibility. The threat is currently under investigation, yet remains operational and poses a direct risk to users who may surrender wallet credentials or funds under the guise of a ‘reward’ or ‘promotion’.

This domain exhibits multiple red flags consistent with active impersonation campaigns. VirusTotal analysis shows zero detections out of 95 engines as of the latest scan, indicating limited signature-based detection despite the malicious intent. The domain resolves to IP 188.114.97.3, which is associated with dynamic hosting environments frequently abused by threat actors. While the SSL certificate issued by Let’s Encrypt adds a veneer of legitimacy, it does nothing to validate the domain’s authenticity. The page title ‘SOLANA SPIN’ is a clear attempt to exploit brand recognition and urgency to trick visitors into engaging with a fraudulent scheme.

Users who have visited semerkapahana.shop or interacted with its content should immediately cease all actions, especially those involving Solana wallet connections or cryptocurrency transfers. Do not enter any credentials, private keys, or seed phrases on the site. Review wallet transaction histories for unauthorized movements and revoke any connected dApps or permissions via your wallet interface. If funds were lost or credentials compromised, report the incident to your wallet provider and consider transferring remaining assets to a new, secure wallet. Use reputable ad-blockers, DNS filtering solutions, or browser extensions that block known malicious domains to prevent future exposure. Always verify URLs through official Solana channels and avoid clicking links from unsolicited messages or advertisements.