solaroid[.]top

The domain solaroid.top is identified as a high-risk brand impersonation threat specifically targeting Solana, a prominent blockchain platform. Analysis indicates this domain was designed to deceive users by mimicking legitimate Solana-related activities, likely through fraudulent giveaways or token distribution schemes. The site is currently offline, but prior activity suggests it operated as a crypto drainer or social engineering vector under the guise of a promotional event titled 'SOLANA SPIN.' Infrastructure analysis reveals the domain was registered on April 10, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolved to the IP address 104.21.90.109, a Cloudflare-protected endpoint commonly associated with malicious infrastructure. Security vendors flagged the domain in 11 of 95 VirusTotal scans, with detections categorized under social engineering by Google Safe Browsing. The domain appears on four security blocklists and is explicitly blocked by wallet security tools and DNS-based threat feeds. Technologies detected on the site include Node.js, Vue.js, Nuxt.js, and jQuery, which are frequently leveraged to create convincing but fraudulent interfaces. Current status confirms solaroid.top has been taken offline, though residual risk remains for users who may have interacted with it during its active period. Organizations and individuals are advised to block the domain at the DNS level, monitor for related indicators of compromise, and educate users on recognizing brand impersonation tactics. Network logs should be reviewed for connections to 104.21.90.109 or requests to solaroid.top, particularly in environments where Solana-related activities occur. Proactive measures include deploying endpoint detection rules for the domain and its associated IP, as well as verifying the legitimacy of any Solana-themed promotions through official channels only.