pmpsolana[.]com

Analysis of pmpsolana.com, created on February 21, 2026 and hosted on Cloudflare, shows a high‑risk brand‑impersonation campaign targeting Solana. The domain resolves to IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc., and is located in the United States. DNS resolution is served by the authoritative nameservers malavika.ns.cloudflare.com and rex.ns.cloudflare.com, confirming the use of Cloudflare's DNS infrastructure. The site presents an HTTP 301 redirect and negotiates HTTP/3, indicating modern web protocol support, while the TLS certificate is issued by Google Trust Services under the WE1 label, providing a legitimate‑looking HTTPS endpoint.

The page title returned by the server is "Home - alexsetandforget.com," which does not reference the Solana brand and suggests the underlying content may be unrelated to the advertised target. VirusTotal reports three out of ninety‑five security vendors flagging the domain, and the domain appears on two public blocklists, PhishDestroy and ScamSniffer, reinforcing the malicious classification. Registration was performed through NiceNIC International Group Co., Limited, and the listed scam type is "Crypto Scam," consistent with the Solana impersonation vector.

While the observed infrastructure points to a credential‑harvesting or crypto‑drain scheme, the exact payload or phishing page has not been publicly captured, leaving the specific user‑facing tactics uncertain. Defenders should block traffic to 188.114.96.3, add pmpsolana.com to URL filtering policies, and monitor for any derivative subdomains or similar Cloudflare‑hosted domains that reference Solana. Continuous re‑scanning on multi‑vendor platforms is advised to capture any evolving payloads or additional detections.