main-solan[.]org

This report details the domain main-solan.org, identified as an impersonation of a legitimate cryptocurrency airdrop brand. The site's page title, "SolDrop - Claim Your 15 SOL Airdrop," indicates it operates as a cryptocurrency scam designed to trick users into connecting their wallets or providing credentials under the false promise of free tokens. The threat posed is financial theft, as such scams typically drain cryptocurrency wallets once a user interacts with the fraudulent claim interface.

Technical analysis reveals the domain was created on 2026-03-13 and registered through NiceNIC International Group Co., Limited. VirusTotal data shows 3 out of 95 security vendors flagged the domain as malicious, with specific detection by Fortinet, Gridinsoft, and SOCRadar. The site is hosted on IP address 188.114.97.3 (United States), assigned to AS13335 Cloudflare, Inc., and uses nameservers ace.ns.cloudflare.com and kristin.ns.cloudflare.com. No SSL certificate was detected, indicating a lack of encrypted communication.

As of the analysis date, the domain is reported as DOWN/OFFLINE, meaning the threat is currently inactive. The domain risk score of 56 suggests a moderate risk level, and the site appears on one blocklist. Despite being offline, the domain remains a potential threat if reactivated, and users should avoid any interaction with it.