solanafm-sol[.]site

The domain solanafm-sol.site is a confirmed phishing site engaged in brand impersonation targeting users of the Solana cryptocurrency platform. It presents itself as a legitimate Solana service, specifically mimicking the SolanaFM brand, to deceive victims into interacting with fraudulent cryptocurrency transactions. As of the latest verification, solanafm-sol.site has been taken offline, though it previously operated as an active scam site with no associated drainer kit detected.

Technical analysis reveals that solanafm-sol.site was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar. The domain was registered through NameCheap, Inc. on January 03, 2026, and resolved to the IP address 198.54.115.138, hosted by Namecheap, Inc. in the United States. It appeared on 3 security blocklists, specifically PhishDestroy, MetaMask, and SEAL. No SSL certificate was issued for the domain, and its nameservers were dns1.namecheaphosting.com and dns2.namecheaphosting.com. The observed page title was 'SolanaFM', reinforcing its attempt to impersonate the legitimate SolanaFM service.

Users who interacted with solanafm-sol.site should immediately revoke any token approvals granted to unknown or suspicious contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency-related accounts and monitor for unauthorized transactions. Victims are advised to report the phishing domain to their wallet provider, the impersonated brand (Solana), and relevant authorities such as the Anti-Phishing Working Group (APWG) or local cybercrime units.