solscran[.]coinsbychrist[.]net

This domain, solscran.coinsbychrist.net, is flagged as a confirmed phishing site specializing in brand impersonation of Solana, a major blockchain platform. Analysis indicates the site mimics a legitimate Solana transaction explorer under the page title 'Solana Insights - Solana Transaction Explorer,' designed to harvest wallet credentials and drain cryptocurrency assets. The presence of a drainer kit is inferred from the site's structure, which aligns with known phishing tactics targeting crypto users. No explicit drainer kit name was identified, but the infrastructure and impersonation tactics are consistent with wallet-draining campaigns. Infrastructure analysis reveals the domain was registered on April 27, 2026, through 1API GmbH and currently resolves to the IP address 138.226.236.185. The site employs a Let's Encrypt SSL certificate, a common tactic to appear legitimate. VirusTotal reports 4 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist, specifically PhishDestroy, and is classified as a brand impersonation threat. No Google Safe Browsing (GSB) status is currently available, but the domain's offline status suggests mitigation efforts may be underway. As of the latest assessment, solscran.coinsbychrist.net has been taken offline, reducing immediate exposure to users. However, residual risk remains due to the domain's recent registration and the potential for infrastructure reuse. Organizations and individuals are advised to block the domain and associated IP address (138.226.236.185) at the network level. Users who interacted with the site should revoke wallet permissions, transfer assets to a secure wallet, and monitor for unauthorized transactions. Continuous monitoring of related domains registered through 1API GmbH is recommended to preempt similar threats.