sollet-wallet[.]io

This domain, sollet-wallet.io, is flagged as a brand impersonation threat targeting the Solana cryptocurrency platform. Analysis indicates the site presented itself as a legitimate Solana wallet interface, specifically using the page title 'Sollet Wallet | Best Solana Wallet,' a clear attempt to deceive users into interacting with fraudulent infrastructure. No direct evidence of a crypto drainer kit was observed, but the domain’s intent aligns with credential harvesting or wallet compromise tactics commonly employed in cryptocurrency fraud schemes. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It resolved to the IP address 80.78.28.170, hosted under AS39287 (Materialism s.r.l.) in Denmark. VirusTotal detections show 10 out of 95 security vendors flagged the domain as malicious, while it appeared on a single security blocklist. The SSL certificate was issued by Let’s Encrypt (R13), a common choice for both legitimate and malicious sites due to its accessibility. No Google Safe Browsing (GSB) entries were noted at the time of assessment. The domain has since been taken offline, reducing immediate exposure risk. However, residual threats persist due to potential cached DNS entries or delayed blocklist propagation. Users who interacted with the site prior to its removal may remain vulnerable to follow-up attacks, such as phishing emails or secondary malware distribution. Recommendations include monitoring for unauthorized transactions, revoking any permissions granted to suspicious wallet applications, and verifying domain authenticity before engaging with cryptocurrency-related services. Persistent vigilance is advised, as similar impersonation domains may emerge using comparable infrastructure or registration patterns.