blaze-stake[.]com

This domain, blaze-stake.com, poses a high-risk brand impersonation threat targeting users of the Solana blockchain ecosystem. Analysis indicates the domain mimics legitimate Solana liquid staking and swap services, specifically BlazeStake, to deceive users into disclosing wallet credentials or transferring digital assets. The page title, 'BlazeStake — Solana Liquid Staking, Swap,' directly aligns with known Solana-related services, increasing the likelihood of successful social engineering attacks against cryptocurrency holders. Evidence supporting the malicious classification includes detection by 15 out of 95 security vendors on VirusTotal, presence in 2 AlienVault OTX threat intelligence pulses, and inclusion on 3 security blocklists. Infrastructure analysis reveals the domain resolves to IP address 188.114.96.3 and employs Cloudflare with HTTP/3, a configuration often used to obscure hosting origins and evade detection. The domain was registered through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. Additionally, the domain has been blocked by multiple security entities, including MetaMask and PhishDestroy, further validating its malicious intent. Users who visited blaze-stake.com or interacted with its content should immediately revoke any connected wallet permissions and transfer assets to a new, secure wallet. Monitor transaction histories for unauthorized activity and report the incident to relevant blockchain security teams. If credentials were entered, assume compromise and rotate all associated passwords and private keys. Given the domain's current offline status, users should remain vigilant for similar impersonation attempts targeting Solana or other blockchain services.