sol-creator[.]fun

The domain sol-creator.fun was created on 12 March 2026 and registered through PDR Ltd. d/b/a PublicDomainRegistry.com. It is hosted on Cloudflare, using the authoritative nameservers dana.ns.cloudflare.com and ethan.ns.cloudflare.com, and resolves to the IPv4 address 172.67.208.229, which is owned by AS13335 Cloudflare, Inc. in the United States. No TLS certificate is presented, meaning the site does not support HTTPS and would serve content over plain HTTP if it were reachable. The only observable page attribute is the title “Just a moment…”, and the server advertises Cloudflare Browser Insights and HTTP/3, both typical of a generic Cloudflare front‑end.

The intelligence flags the domain as a crypto‑related scam that impersonates the Solana brand. VirusTotal records indicate that three of ninety‑four scanning engines flagged the domain as malicious, and three independent blocklists—PhishDestroy, MetaMask, and SEAL—have already listed it. The current operational status is reported as offline, which may reflect a deliberate takedown by the operators or a temporary service interruption, but the presence on multiple blocklists demonstrates that the domain has been used for abusive activity.

Given the combination of recent registration, lack of encryption, Cloudflare hosting, flagged detections, and explicit brand impersonation, security teams should continue to block the domain at both network perimeter and endpoint controls. Monitoring should include DNS queries for the domain, its IP address, and the associated Cloudflare nameservers, as attackers could repoint the domain to a new host if the campaign is revived. Threat‑intel feeds should be updated to include sol-creator.fun and its IP, and user‑facing communications—especially for wallets or services that interact with Solana—should warn users not to trust any URLs containing this domain.