solchainapp[.]click

The domain solchainapp.click was registered on 21 February 2026 and is currently listed as offline. DNS resolution points to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The TLS certificate presented for the host is identified as WE1, indicating a valid‑looking SSL chain that could be used to lend credibility to malicious pages. The only page title observed during the brief analysis is “Raydium”, a name associated with a decentralized finance platform, which aligns with the reported crypto‑scam classification.

The domain is explicitly marked as impersonating the Celer brand, suggesting that any content previously hosted was intended to lure users of the Celer ecosystem. VirusTotal scans show that three out of ninety‑three security vendors flagged the domain, and it appears on one public blocklist. Additionally, the anti‑phishing service PhishDestroy has added the domain to its blocklist, confirming detection by at least one dedicated phishing mitigation platform. Because the site is offline, direct observation of malicious payloads or credential‑harvesting forms is not possible, leaving the exact attack vector uncertain.

However, the combination of brand impersonation, a DeFi‑related page title, and the presence of a Cloudflare edge IP that is commonly abused for fast‑flux or proxy services suggests a typical crypto‑draining campaign. Defenders should continue to block traffic to solchainapp.click at the DNS or firewall level, monitor the associated IP address for any future re‑activation, and add the domain to internal threat‑intel feeds. Users of Celer‑related services should be warned that unsolicited communications referencing “Raydium” or other DeFi terms may be linked to this infrastructure. Ongoing collection of any new indicators, such as refreshed TLS certificates or changes in the hosting provider, will be necessary to maintain accurate detection.