solanaspinsclaim[.]cyou

solanaspinsclaim.cyou was registered through Global Domain Group LLC and first observed on 11 December 2025. The domain resolves to 188.114.97.3, an address owned by Cloudflare (AS13335) located in the United States. Both authoritative name servers are Cloudflare‑provided (lynn.ns.cloudflare.com, walk.ns.cloudflare.com). No TLS certificate was presented, indicating the site was served over plain HTTP when active.

The page title returned “Solana”, matching the declared brand target and confirming that the operator intended to impersonate the Solana cryptocurrency project. The site has been classified as a crypto‑scam and is listed as a brand‑impersonation case. Reputation scoring from Gridinsoft assigns a 0 / 100 trust rating, and 13 of 95 VirusTotal scanners flagged the domain as malicious. It appears on one external blocklist and is actively blocked by PhishDestroy.

At the time of analysis the host is taken offline, but the infrastructure—public Cloudflare IP and generic DNS configuration—suggests the operator can relaunch the site with minimal change. Defenders should add the domain and its resolving IP to network‑level deny lists, monitor Cloudflare‑hosted IP ranges for similar patterns, and watch for new domains registering with the same registrar that use the “solana” keyword in the title. Continuous observation of VirusTotal and other sandbox feeds is advised to capture any re‑activation attempts. The lack of SSL and the low trust score further indicate a low‑quality malicious deployment, but the presence of multiple vendor detections confirms a credible threat.