solana-lottery[.]com

solana-lottery.com was registered on February 28, 2025 through Tucows Domains Inc. The authoritative nameservers ns1.vercel-dns.com and ns2.vercel-dns.com resolve the domain to the Amazon Web Services IP address 216.198.79.65, belonging to ASN 16509 (Amazon.com, Inc.) and geolocated in the United States. HTTP service fingerprints indicate the use of Nginx with the OpenResty module, and the presented TLS certificate is issued by GoDaddy.com under the GoDaddy TLS Intermediate CA DV - R1v1 chain. The page title returned from the live host was “Solana Galaxy,” suggesting an attempt to associate the site with the Solana blockchain ecosystem. The threat profile is classified as a brand impersonation crypto scam targeting Solana users.

VirusTotal recorded a single positive detection out of 95 scanning engines, and the domain is listed on one public blocklist, where it has also been taken down by the PhishDestroy takedown service. As of the report date (July 24, 2026) the domain is offline. No additional content analysis is available beyond the title, so the exact malicious payload or credential‑harvesting mechanisms remain unknown.

Defenders should continue to block the IP address 216.198.79.65 and add solana‑lottery.com to domain‑allow‑list exclusions. Monitoring of future registrations that reuse the same registrar, hosting provider, or similar naming patterns is recommended, as well as regular re‑scanning with multi‑engine services to detect any re‑activation. The limited detection footprint indicates a low‑volume campaign, but the elevated risk rating reflects the potential impact on cryptocurrency holders.