speedrug[.]pro

This domain is flagged for brand impersonation with an elevated risk level, specifically targeting users of Across Protocol by masquerading as a legitimate Solana token creation and management platform. The threat involves luring victims into interacting with fraudulent smart contract tools, potentially leading to unauthorized token minting, fund theft, or credential harvesting under the guise of advanced blockchain services. Analysis indicates the domain speedrug.pro was registered on April 04, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 104.21.52.249 and is hosted behind Cloudflare, utilizing HTTP/3 and React for its frontend. The SSL certificate is issued by Google Trust Services. Security vendor detection on VirusTotal stands at 3/95, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and was taken offline following detection by automated phishing prevention systems. The page title explicitly claims to offer 'SpeedRug - Advanced Solana Token Creation & Management,' directly impersonating Across Protocol’s branding. Mitigation steps for this threat type include immediate blocking of the domain and its resolving IP (104.21.52.249) at the network perimeter. Organizations should update endpoint protection rules to flag any attempts to access speedrug.pro or related subdomains. Security teams are advised to monitor for unusual Solana token transactions or wallet interactions originating from user activity tied to this domain. User awareness training should emphasize verifying official Across Protocol communication channels and scrutinizing domain registration dates (April 2025 in this case) when encountering unsolicited token management tools. Additionally, internal logs should be reviewed for connections to 104.21.52.249 or references to the seed identifier ccddc0 in proxy or DNS records.