http://solana-safety-v4-gkniuxdj-popescu345345.4everland.app
172.67.136.240 · Cloudflare, Inc.
Toronto, Canada
1684 days
200 · 11.5s
Valid· WE1, Google Trust Services, US
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Unknown
Vendors
25/25
Status
completed
Registered-domain escalation
Submit 4everland.app as the primary IOC, enriched with evidence from hostile subdomains like solana-safety-v4-gkniuxdj-popescu345345.4everland.app.
No KB/IOK detections were recorded for this scan.
Cryptocurrency · 4/5/2026
This site at solana-safety-v4-gkniuxdj-popescu345345.4everland.app impersonates the Solana brand by presenting a fake 'Protocol Activation' interface. The page encourages users to connect their wallets and potentially transfer funds, indicating a credential phishing scheme aimed at exploiting Solana users.
The domain solana-safety-v4-gkniuxdj-popescu345345.4everland.app is a clear phishing attempt targeting Solana users, as it mimics the brand with a misleading title and interface. The absence of legitimate forms in the static HTML suggests that credential capture is handled dynamically through JavaScript. Additionally, the POST request to a suspicious endpoint raises concerns about potential data exfiltration. Immediate action is required to mitigate risks to users.
Suspend Domain