solana-launch[.]com

Analysis indicates that solana-launch.com is a newly registered domain (October 20, 2025) that has been used for brand impersonation targeting Solana users. The domain resolves to IP 188.114.97.3, an address owned by Cloudflare (AS13335) located in the United States. No TLS certificate was presented, meaning the service operated without encryption. The only observed page title was "Nur einen Moment…", which provides no functional insight but confirms the site responded before being taken offline. The domain is delegated to Cloudflare nameservers fonzie.ns.cloudflare.com and luciana.ns.cloudflare.com, a configuration frequently leveraged by malicious actors for rapid deployment.

Registration was performed through Dominet (HK) Limited, a registrar often associated with abusive registrations. The Gridinsoft trust score is 0/100, and the domain appears on one security blocklist and has been blocked by PhishDestroy. VirusTotal scans show three of ninety‑five security vendors flagging the domain, reinforcing the suspicion of malicious intent. The threat is classified as a crypto scam involving Solana brand impersonation. Although the site is currently offline, the infrastructure artifacts remain actionable.

Defenders should add the IP 188.114.97.3 to network deny lists, monitor for re‑registration of similar domain patterns, and enforce URL filtering against the observed page title and hostnames. Continuous surveillance of Cloudflare‑hosted IP ranges linked to this registrar is recommended, as is updating endpoint protection with the latest indicators from PhishDestroy and related blocklists. Because the site lacked SSL, any future activation will likely be over HTTP, making detection via DNS or HTTP request monitoring straightforward. In summary, solana-launch.com exhibits multiple high‑confidence indicators of brand‑impersonation crypto fraud and should be treated as malicious until proven otherwise.