vault-grab[.]fun

The domain vault-grab.fun is a phishing site that impersonates the cryptocurrency brand Solana. It poses an elevated risk as a brand impersonation scam, designed to trick users into claiming Solana token airdrops. The site has been taken offline, but it is important to remain vigilant and avoid any similar domains.

vault-grab.fun was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on February 25, 2026. The domain resolves to the IP address 188.114.96.3, which is located in the US and is part of AS13335 Cloudflare, Inc. According to VirusTotal, 1 of 95 vendors flagged this domain as malicious, and it appears on 4 security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. The site did not have an SSL certificate, and the page title observed was 'Airdrop Live | Claim Solana Token Airdrops.'

If a user has interacted with vault-grab.fun, they should take immediate steps to secure their accounts. For cryptocurrency drainer scams, users should revoke any unauthorized token approvals and move their funds to a new, secure wallet. For credential or login phishing, users should change their passwords, enable two-factor authentication, and monitor their accounts for any signs of unauthorized activity. Additionally, users can report this phishing site to the impersonated brand Solana, as well as to their preferred security platforms such as PhishDestroy, MetaMask, and ScamSniffer.