irynasolana[.]com

irynasolana.com was registered on September 10, 2025 through ERANET INTERNATIONAL LIMITED. The domain resolves to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution uses the Cloudflare authoritative nameservers ajay.ns.cloudflare.com and phoenix.ns.cloudflare.com. No TLS certificate was observed, indicating the site was served without HTTPS. The public page title returned by the server was “$IRYNA Airdrop”, a phrasing commonly associated with cryptocurrency airdrop scams.

The domain is explicitly linked to a known “Airdrop Scam” phishing kit and is marked as impersonating the Solana brand, matching the threat type of brand impersonation. Reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, reflecting a highly malicious rating. VirusTotal analysis shows that one out of ninety‑five scanned security vendors flagged the domain, confirming at least one independent detection. The domain appears on two external blocklists and has been actively blocked by the PhishDestroy and ScamSniffer services. Current operational status is listed as offline, suggesting the site has been taken down or is otherwise inaccessible.

Because the site is offline, the actual phishing page cannot be inspected, leaving uncertainty about the exact payload or credential collection mechanisms used. However, the combination of the airdrop‑oriented title, the Solana impersonation flag, and the presence on multiple anti‑phishing blocklists provides sufficient confidence to classify the domain as a malicious brand‑impersonation vector. Defenders should continue to monitor the IP address 188.114.97.3 for any re‑use, enforce blocklist entries for irynasolana.com, and incorporate the domain into URL filtering policies that target Solana‑related brand impersonation.