sollas[.]pw

The domain sollas.pw is a phishing site engaged in brand impersonation targeting users of the Phantom cryptocurrency wallet. It presents itself as a 'Solana Claim' page, a common tactic to deceive victims into connecting their wallets under false pretenses. As of the latest verification, sollas.pw has been taken offline, but it previously posed an elevated risk as a wallet-connect phishing scam designed to steal credentials or digital assets. No drainer kit was identified, but the site impersonated Phantom to exploit trust in the brand.

Technical indicators confirm sollas.pw was registered through NameSilo, LLC on October 31, 2025, and resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335). Security vendors flagged the domain with 1 of 95 detections on VirusTotal, including SOCRadar, while it appeared on 1 security blocklist (PhishDestroy). The site lacked an SSL certificate, and its nameservers were jacqueline.ns.cloudflare.com and joaquin.ns.cloudflare.com. Google Safe Browsing did not flag it, but Gridinsoft assigned a trust score of 0/100, reinforcing its malicious nature.

Users who interacted with sollas.pw should immediately revoke any token approvals granted to the site via their Phantom wallet and transfer remaining funds to a new, secure wallet. Enable two-factor authentication (2FA) on all accounts and monitor for unauthorized transactions. Report the domain to platforms like PhishTank, Google Safe Browsing, or the impersonated brand (Phantom) to aid in takedown efforts. Victims of crypto scams should also file reports with local cybercrime authorities or organizations like the FBI’s IC3.