seeker-solana[.]com

The domain seeker-solana.com is a confirmed phishing site engaged in brand impersonation targeting the Solana cryptocurrency ecosystem. It presents itself as an official Solana Mobile page to deceive users into interacting with fraudulent cryptocurrency schemes, specifically designed to steal assets without employing a known drainer kit. As of the latest verification, seeker-solana.com has been taken offline, though it previously posed an elevated risk to users searching for Solana-related services.

Technical indicators confirm the malicious nature of seeker-solana.com. The domain was flagged by 1 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned a trust score of 0/100. It appears on 2 security blocklists, PhishDestroy and ScamSniffer, and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on September 17, 2025. The domain resolved to the IP address 94.181.203.96, hosted in Russia under AS41727 JSC ER-Telecom Holding, and used Cloudflare nameservers (dell.ns.cloudflare.com and rommy.ns.cloudflare.com). No SSL certificate was present, and the observed page title was 'Solana Mobile | The Web3 Mobile Evolution'.

Users who interacted with seeker-solana.com should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Monitor transaction histories for unauthorized activity and report the incident to relevant platforms, such as Solana’s official security channels or cryptocurrency fraud reporting services. Additionally, victims may submit the domain to Google Safe Browsing, PhishTank, or other threat-intelligence feeds to aid in broader detection efforts.