soldegen[.]live

This domain, soldegen.live, is flagged as a crypto scam targeting users through a fraudulent platform titled RugpullZone AI. Analysis indicates the domain was registered on March 14, 2026, and is currently offline. It resolves to the IP address 104.21.42.96, hosted by Cloudflare, Inc. in Canada, a common proxy service used to obscure malicious infrastructure. The domain lacks an SSL certificate, increasing the risk of unencrypted data interception. Infrastructure analysis reveals the use of Cloudflare nameservers (cora.ns.cloudflare.com, justin.ns.cloudflare.com) and technologies including Node.js, Chart.js, Vue.js, Nuxt.js, and jsDelivr, which are often leveraged in dynamic scam pages to simulate legitimate crypto platforms.

Detection by security vendors is limited but notable: four of 94 vendors on VirusTotal flagged the domain, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with fraudulent domains. The absence of an SSL certificate and the use of Cloudflare hosting further align with tactics observed in crypto scams, where anonymity and rapid takedowns are prioritized. Defenders should treat this domain as high-risk for crypto-related fraud.

While the exact content of the site is not analyzed, the page title RugpullZone AI suggests a focus on deceiving users with promises of artificial intelligence-driven crypto trading or investment opportunities, a common lure in rug pull scams. The domain's current offline status does not eliminate risk, as similar infrastructure may re-emerge under new domains. Monitoring for related domains, IP associations, and technologies (e.g., Nuxt.js, Cloudflare) is recommended. Blocking the domain and its resolved IP at the network level, along with educating users on crypto scam indicators, is advised.