solwrapped[.]org

The domain solwrapped.org is identified as a high-risk crypto drainer phishing site specifically targeting users of the Solana blockchain platform. Analysis indicates the domain is currently offline but was actively impersonating Solana to deceive victims into connecting wallets, likely facilitating unauthorized token transfers. The page title, 'Solana Wrapped — On-Chain Regret Wrapped,' suggests a social engineering tactic designed to exploit user trust in Solana’s ecosystem by mimicking legitimate wrapped token services. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious domains. It resolves to the IP address 188.114.97.3 and has been flagged by 12 of 95 security vendors on VirusTotal, including detections for social engineering and brand impersonation. The domain appears on two security blocklists, while Gridinsoft assigns it a trust score of 0 out of 100, further corroborating its malicious classification. Additional intelligence sources, including PhishDestroy and InversionDNS, have blocked access to this domain due to its fraudulent activity. At present, solwrapped.org has been taken offline, though the infrastructure remains a potential threat if reactivated. Users are strongly advised to verify domain authenticity before interacting with any Solana-related services, particularly those involving wallet connections or token transactions. Organizations should update security blocklists to include this domain and monitor for similar impersonation attempts targeting blockchain platforms. Proactive measures, such as browser-based phishing filters and endpoint protection, are recommended to mitigate risks associated with crypto drainer campaigns.