solamacoin[.]org

The domain solamacoin.org was registered on February 21, 2026 and is currently taken offline. DNS resolution points to the IPv6 address 2606:4700:3032::6815:95a, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presented a TLS certificate issued by GTS CA 1P5, indicating a valid SSL chain but offering no assurance of legitimacy.

The only observable page element is the title "Connect Wallet," which aligns with the classified scam type of a crypto phishing attempt. The domain has been listed on three independent blocklists—PhishDestroy, ScamSniffer, and Enkrypt—and appears on three security blocklists overall. VirusTotal recorded scans from 93 antivirus and URL‑reputation vendors; at the time of the latest query no vendor flagged the domain, though the absence of detections does not constitute a safety guarantee.

The limited data set prevents confirmation of the page’s full functionality or malicious payload, but the combination of a recent registration, cloud‑based hosting, crypto‑related page title, and presence on multiple phishing blocklists strongly suggests a targeted cryptocurrency phishing campaign. Defenders should continue to block traffic to the domain, monitor for any re‑hosting or resurrection attempts, and consider sinkholing the associated IP range if feasible. Ongoing threat‑intel feeds should be consulted for potential updates, and any endpoints that may have previously accessed the site should be examined for credential compromise or wallet exposure.