solanagpu[.]lat

The domain solanagpu.lat was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare address 104.21.72.123, ASN 13335, hosted in the United States. The site is presently taken offline, but historical observations show it was served without an SSL certificate and presented a page title of "Un instant…", which offers no direct evidence of the content displayed. VirusTotal scans recorded five positive detections out of ninety‑three security vendors, indicating that multiple scanners identified malicious characteristics.

The domain appears on a single external blocklist and has been explicitly listed by PhishDestroy as a confirmed threat. Nameserver records point to liv.ns.cloudflare.com and michael.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. The threat classification is a crypto‑related scam that impersonates the Solana brand, aligning with the supplied brand target.

Defenders should add solanagpu.lat to URL filtering and DNS block policies, monitor Cloudflare‑associated IP ranges for re‑use, and watch for newly registered domains that share the same registrar or similar naming patterns. Continuous threat‑intel feeds should be consulted for any resurgence, and any user‑reported attempts to access the domain should be treated as potential credential‑stealing or financial‑fraud incidents.