sol-air[.]bet

The domain sol-air.bet was identified as a brand impersonation threat specifically targeting the Solana cryptocurrency platform. This domain was designed to deceive users by mimicking the appearance and functionality of legitimate Solana services, potentially leading to unauthorized access to sensitive information or funds. Analysis by PhishDestroy confirmed the domain employs no known drainer kit but relies on social engineering to trick victims.

Technical examination reveals that sol-air.bet has a VirusTotal score of 0/95, meaning not a single security vendor flagged it as malicious at the time of analysis. The domain was registered on April 25, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, and resolves to IP address 104.21.14.184. Its SSL certificate was issued by Let's Encrypt (E7), and the page title displayed was "Just a moment..." The domain appears on 3 security blocklists, and Google Safe Browsing status was not flagged. These indicators suggest the domain was newly created and had not yet been widely detected by security tools.

As of the latest assessment, sol-air.bet has been taken offline, reducing the immediate risk to users. However, because the domain was active recently and may reappear under different variations, users should remain vigilant. PhishDestroy recommends that anyone who interacted with this domain monitor their accounts for unusual activity and avoid visiting similar domains. The remaining risk is low while the domain remains offline, but the potential for brand impersonation attacks on Solana persists, so users should always verify URLs before entering credentials or connecting wallets.