solanagpu[.]live

The domain solanagpu.live was registered on February 21 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presents an HTTPS certificate issued by Google Trust Services under the WE1 label, confirming that TLS is in use, yet the HTTP response returns a 403 status code, indicating that access is deliberately denied or that the content is being restricted. The only observable page element is the title "Even geduld...", which provides no clear indication of the page’s purpose. Automated fingerprinting detected Cloudflare Browser Insights, generic Cloudflare services, and HTTP/3 support, consistent with the hosting provider’s infrastructure.

The domain is flagged by multiple threat intelligence sources: PhishDestroy, MetaMask, and SEAL have listed it as blocked, and it appears on three external security blocklists. VirusTotal analysis shows that three of ninety‑three security vendors have classified the domain as malicious, reinforcing the suspicion of illicit activity. Gridinsoft assigns a trust score of 0 out of 100, reflecting an extremely low reputation. The threat type is recorded as brand impersonation targeting the Solana ecosystem, with a crypto‑scam classification and a high risk rating.

While the page content has not been publicly dissected, the convergence of recent registration, Cloudflare‑based hosting, a restrictive HTTP status, low trust scores, and multiple blocklist listings provides strong evidence that the domain is being used to deceive Solana users. Defenders should immediately block solanagpu.live at network perimeters, update DNS sinkhole tables, and monitor for any related C2 or phishing infrastructure that may reference the same IP or nameserver pair (liv.ns.cloudflare.com, michael.ns.cloudflare.com).