1coin-sol[.]com

The domain 1coin-sol.com was registered on February 21, 2026 through Web Commerce Communications Limited and subsequently taken offline prior to the report date of July 23, 2026. DNS records show the zone is hosted on Cloudflare, using the authoritative name servers indie.ns.cloudflare.com and junade.ns.cloudflare.com. The domain resolves to IP address 104.21.19.124, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. TLS termination is provided by a Google Trust Services certificate issued under the WE1 trust store, confirming the use of a valid, widely‑trusted SSL chain.

Web‑application fingerprints reveal the presence of Cloudflare Browser Insights, Cloudflare services, and HTTP/3 support, indicating that the site leveraged modern CDN features. The HTTP response returned a page titled "404 Not Found," suggesting that the site either served a default error page or was deliberately configured to conceal malicious content at the time of observation. Threat intelligence indicates the domain was employed for a crypto‑scam that impersonates the Solana brand, aligning with the reported brand target of Solana. It was listed on two independent blocklists, PhishDestroy and ScamSniffer, and appears on two security blocklists overall.

VirusTotal analysis recorded detections from two of ninety‑one scanning engines, providing modest corroboration of malicious activity. While the offline status prevents direct content inspection, the combination of brand impersonation, a valid SSL certificate, Cloudflare hosting, and blocklist listings strongly points to a purposeful attempt to deceive users seeking Solana‑related services. Uncertainty remains regarding the exact payload or phishing workflow that may have been delivered before takedown.