solmemecoins[.]net

Analysis indicates that the domain solmemecoins.net was registered on October 27 2025 through Web Commerce Communications Limited. The site resolves to the IP address 172.67.179.157, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution is served by the Cloudflare nameservers colette.ns.cloudflare.com and gerardo.ns.cloudflare.com. No TLS certificate was observed, and the site currently returns an offline HTTP status, confirming that the malicious payload is no longer accessible at the time of review.

The page title retrieved during the last active scan was “Luna Launch – Solana Token Launcher”, which aligns with the reported scam type of wallet/seed phishing and the brand impersonation of Discord. Gridinsoft assigned a trust score of 0 out of 100, indicating an extremely low reputation. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy. VirusTotal recorded nine detections out of ninety‑five scanners, and AlienVault OTX listed the domain in one threat‑intel pulse.

The combination of a high‑risk brand target, low trust score, and multiple vendor detections suggests a deliberate attempt to harvest Discord credentials or cryptocurrency seed phrases. Defenders should add solmemecoins.net to URL filtering policies, block the associated Cloudflare IP range where feasible, and monitor for newly registered domains that use the same registrar or similar naming patterns. Continuous re‑query of the domain’s DNS and SSL status is advised, as the offline state may be temporary and the infrastructure could be repurposed for future campaigns.