solanomobile[.]org

This domain is classified as high-risk due to brand impersonation targeting Solana, a major blockchain platform. The site masquerades as an official Solana Mobile storefront, potentially deceiving users into submitting sensitive information or making fraudulent purchases under false pretenses. The specific threat involves fake retail operations designed to exploit trust in the Solana brand for financial gain or credential harvesting. Analysis indicates the domain solanomobile.org was registered on February 21, 2026, through Squarespace Domains LLC. It resolves to IP address 104.21.57.173, hosted on Cloudflare’s infrastructure (AS13335). The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. Google Safe Browsing categorizes it as phishing, while VirusTotal reports 15 out of 95 security vendors flagging it as malicious. The SSL certificate is issued by Google Trust Services (WE1), and the page title, "Shop - Solana Mobile World | Premium Mobile Devices & Tech," reinforces the fraudulent retail theme. Mitigation for this brand impersonation threat involves immediate blocking of the domain and its resolving IP (104.21.57.173) at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to this domain. Users should be educated on verifying official Solana domains, particularly those involving retail or financial transactions. Monitoring for similar domains registered through Squarespace Domains LLC or resolving to Cloudflare IPs may help identify additional impersonation attempts targeting blockchain-related brands.