solanakaufen[.]com

solanakaufen.com is a phishing domain designed for brand impersonation, specifically targeting the cryptocurrency brand Solana. The site was created to deceive users into believing they are interacting with legitimate Solana resources. The domain's current status is offline, reducing immediate risk, but it previously posed an elevated threat level due to its impersonation tactics.

Technical indicators reveal that solanakaufen.com was detected by only 1 of 95 vendors on VirusTotal, suggesting limited recognition by security systems. The domain was registered through HOSTINGER operations, UAB, and created on October 19, 2025. It resolves to the IP address 2a02:4780:43:5d3:5df1:f13:ec04:eb26, located in Germany under AS47583 Hostinger International Limited. The domain appears on one security blocklist, PhishDestroy, and uses an SSL certificate issued by Let's Encrypt / R12. Technologies detected on the site include Hostinger CDN, Hostinger, Google Analytics, and HTTP/3.

Users who may have interacted with solanakaufen.com should take immediate safety steps. If cryptocurrency transactions were involved, it is crucial to revoke token approvals and move funds to a new wallet to prevent unauthorized access. For those who may have entered credentials, changing passwords, enabling two-factor authentication, and monitoring for fraudulent activity are recommended. Reporting suspicious activity to platforms like PhishDestroy and other security vendors can aid in preventing further phishing scams.