solanamars[.]com

Analysis indicates that solanamars.com was registered on 21 January 2025 through GoDaddy.com, LLC and continues to resolve to the Cloudflare‑provided address 104.21.77.236 (AS13335, United States). The site returns HTTP 200 and presents a WordPress stack with MySQL, PHP, particles.js, Bootstrap, Select2, OWL Carousel and jQuery Migrate. The page title observed is “SolanaMars”, matching the declared brand target Solana and the listed scam type “Crypto Scam”. The SSL certificate is issued by Google Trust Services under the WE1 root, confirming transport encryption but providing no indication of legitimacy.

The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service. VirusTotal reports that the domain has been scanned by 91 vendors, none of which flagged the host at the time of analysis; this absence of detections does not constitute a safety assurance. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high‑risk assessment. Nameserver configuration uses carioca.ns.cloudflare.com and rob.ns.cloudflare.com, consistent with the Cloudflare front‑end.

Current evidence does not reveal any additional malicious infrastructure such as command‑and‑control endpoints, but the combination of brand impersonation, crypto‑focused lure, and low trust score suggests a likely fraudulent operation. Defenders should continue to block the domain at perimeter and endpoint layers, monitor DNS queries for the associated IP and nameservers, and consider adding the host to internal blocklists. Ongoing surveillance of VirusTotal and other sandbox feeds is recommended to capture any future payloads or detections. Until a definitive takedown is confirmed, the domain should be treated as malicious.