stake[.]createonsol[.]com

PhishDestroy identifies stake.createonsol.com as an active brand impersonation domain targeting Solana users through a fake staking referral page titled 'COSOL Staking Referral - No-Code SaaS on Solana'. The threat level is currently under investigation but poses a credible risk due to active hosting and deceptive branding. Domain registration details reveal creation on January 26, 2026 through NameCheap, Inc., resolving to IP 216.198.79.65. Current security assessments show zero detections (2/95) on VirusTotal with no presence on major blocklists. The domain uses a legitimate Let's Encrypt SSL certificate to enhance credibility. The page title explicitly mimics Solana's ecosystem branding while promoting a fraudulent 'no-code SaaS' staking referral scheme. This domain demonstrates clear hallmarks of brand impersonation phishing, leveraging Solana's popularity to deceive users seeking legitimate staking opportunities. The recent domain creation date combined with zero security detections suggests this is a newly deployed threat. Users should avoid interacting with this domain entirely and report any encountered pages to security teams. Security researchers should monitor this domain for rapid takedown efforts while collecting additional IOCs for network defense integration. Immediate mitigation includes blocking the domain at DNS/endpoint levels and warning users about this specific brand impersonation campaign. The combination of active hosting, zero detections, and direct Solana impersonation makes this domain particularly dangerous for cryptocurrency users. Consider this domain actively malicious until proven otherwise through sustained monitoring and takedown efforts.