dapp[.]solqpw[.]com

On July 22, 2026 analysts observed that dapp.solqpw.com is currently offline but retains a set of indicators consistent with a brand impersonation campaign targeting Solana users. The domain was registered on February 21, 2026 through Metaregistrar BV and resolves to the IP address 118.107.47.31, which is hosted in Hong Kong under ASN 152194 owned by CTG Server Limited. Authoritative nameservers a11.share-dns.com and b11.share-dns.net resolve the domain, and no TLS certificate is presented, indicating the site was served over plain HTTP. The page title returned by the server, "TokenPocket | Solana 持币生息", references the TokenPocket wallet and the Solana blockchain, reinforcing the impersonation vector.

VirusTotal recorded 3 detections out of 93 scanning engines, and the domain appears on a single external security blocklist, confirming that multiple independent sources have flagged the host. Gridinsoft assigned a trust score of 0 out of 100, and PhishDestroy has actively blocked the domain, further evidencing malicious intent. The available intelligence does not include Safe Browsing or Open Threat Exchange entries, and no additional payload or landing‑page content has been captured, leaving the exact user‑interaction flow uncertain. Defenders should continue to monitor the IP address 118.107.47.31 for any reactivation, enforce DNS‑based blocklists that include the domain, and consider adding the IP to network‑level deny lists.

Because the site lacks SSL, any future re‑hosting would be trivially detectable via certificate inspection. Organizations with Solana wallet integrations should educate users about the unauthorized use of the TokenPocket brand in the page title and advise verification of HTTPS connections before credential entry. Continuous re‑evaluation of the domain’s status is recommended, as offline domains can be resurrected under new infrastructure while retaining the same brand‑impersonation characteristics.