sollink[.]top

This domain is under investigation for brand impersonation targeting the Solana cryptocurrency ecosystem. Analysis indicates it operates as a fraudulent claim portal, likely designed to deceive users into connecting wallets under false pretenses of token distributions or airdrops. The specific threat type—brand impersonation with crypto-drainer characteristics—poses a high risk to users unfamiliar with official Solana communication channels. Infrastructure analysis reveals the domain sollink.top was registered on April 21, 2026, through NameSilo, LLC, and resolved to the IP address 188.114.97.3. Despite its current offline status, the domain has been flagged on three security blocklists and blocked by multiple wallet security providers. VirusTotal reports 0 out of 95 detections, suggesting limited historical scanning or evasion techniques. The Gridinsoft trust score of 0/100 further corroborates its malicious classification. The page title, 'Solana Claim,' directly mimics legitimate Solana campaigns, increasing the likelihood of user deception. Mitigation requires immediate action from both users and security teams. Users who interacted with this domain should revoke any connected wallet permissions via official Solana tools and monitor transactions for unauthorized activity. Security teams should update blocklists to include this domain and its associated IP, while also alerting user bases about the impersonation tactic. Given the domain's creation date and lack of detections, proactive monitoring of newly registered domains with similar naming patterns is recommended to preempt future threats.