solvision[.]life

Analysis of the domain solvision.life, created on February 26, 2026, indicates a confirmed crypto‑related brand impersonation campaign targeting Solana users. The site presented the page title "Sol Vision - AI‑Powered Solana Growth Predictions," explicitly referencing the Solana brand and suggesting a predictive AI service, which aligns with the reported scam type of a crypto scam. Infrastructure examination shows the domain resolves to IP address 170.75.167.42, hosted in Canada under autonomous system AS174 owned by Cogent Communications, LLC. The domain is served by Cloudflare nameservers brad.ns.cloudflare.com and selah.ns.cloudflare.com, a configuration commonly observed in malicious hosting.

No SSL certificate was observed, and the site is currently taken offline, limiting direct verification of malicious payloads but reinforcing the pattern of transient phishing infrastructure. Detection services have flagged the domain, with five of ninety‑three VirusTotal scanners labeling it as malicious, and it appears on three external blocklists. Active defenses have already blocked the domain via PhishDestroy, MetaMask, and SEAL, indicating awareness among credential‑ and wallet‑protecting tools.

The registrar information points to PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with disposable or low‑trust domains. While the site’s content cannot be inspected due to its offline status, the convergence of brand impersonation, crypto‑focused terminology, and detection alerts provides strong evidence of a fraudulent operation. Defenders should continue to block the domain and its hosting IP, monitor for re‑registration attempts, and incorporate the observed indicators of compromise—such as the specific page title and the Cloudflare nameserver pair—into threat‑intel feeds to pre‑empt future replicas.