voludex[.]net

Analysis of voludex.net indicates a high-risk brand impersonation domain targeting users of the Across protocol. The domain was registered on June 3, 2024, through Squarespace Domains LLC and currently resolves to IP address 172.66.0.70, part of Cloudflare's infrastructure. The page title, 'Pump.fun Volume Booster Bot | #1 Solana Token Bot - VoluDex,' suggests an attempt to lure users with promises of automated trading tools, a common tactic in cryptocurrency-related phishing schemes. The domain has been flagged by one security blocklist and appears in 22 threat intelligence pulses on AlienVault OTX, indicating prior malicious activity. Gridinsoft assigns it a trust score of 0/100. Two of 95 security vendors on VirusTotal detect the domain as malicious. SSL certification is provided by Google Trust Services, and Mailgun is detected as an active technology, which may be used for phishing email distribution. While the domain impersonates Across, the exact content and functionality of the site remain unanalyzed. Defenders should treat this domain as active and malicious, blocking resolution at the DNS level and monitoring for related email campaigns. The use of Cloudflare and Mailgun suggests attempts to evade detection and scale the operation. No legitimate association with Across or Solana-based trading tools has been confirmed.