clubsolana[.]fun

clubsolana.fun was registered on February 21 2026 through Name.com, Inc. The domain resolves to the IP address 64.29.17.1, which is owned by Amazon.com, Inc. (AS16509) and is located in the United States. No TLS certificate is presented, indicating that the site operates without HTTPS. The public page title returned by the server is “Solana Club – Memecoin Hangout,” directly referencing the Solana brand. Google Safe Browsing classifies the site as a social‑engineering threat, and three independent security blocklists (PhishDestroy, MetaMask, SEAL) have listed the domain.

VirusTotal reports that 14 of 95 scanning engines flag the domain as malicious, reinforcing the suspicion of a crypto‑related scam. AlienVault OTX contains a single pulse that references the domain, providing additional community‑based corroboration. The collected indicators are consistent with a brand‑impersonation campaign targeting Solana users, likely aimed at luring victims into a memecoin or other cryptocurrency scheme. The offline status at the time of analysis prevents direct observation of the payload or credential‑capture mechanisms, so the exact content and malicious behavior remain unverified.

Nevertheless, the convergence of a brand‑specific page title, social‑engineering labeling, multiple blocklist entries, and a non‑trivial VirusTotal detection rate establishes a high confidence that the domain is being used for fraudulent purposes. Defenders should add 64.29.17.1 to network‑level deny lists, block clubsolana.fun at DNS resolvers, and monitor outbound connections to the associated Amazon hosting range for any residual activity. Endpoint protection solutions should ingest the 14 VirusTotal detections as an indicator of compromise for correlation with suspicious processes. Continuous monitoring of the domain’s registration and any re‑appearance on blocklists is advised, especially given its recent creation date.