redirect-sol-finder-c3404i[.]vercel[.]app

The domain redirect-sol-finder-c3404i.vercel.app was registered through Tucows Domains Inc. on February 21, 2026 and is hosted on Vercel infrastructure, as indicated by the nameservers ns1.vercel-dns-3.com through ns4.vercel-dns-3.com. DNS resolution points to IP address 64.29.17.195, which belongs to the Amazon.com, Inc. network (AS16509) and is geolocated in the United States. The site presented a TLS certificate issued by Google Trust Services under the WR1 intermediate, and HTTP headers include HSTS, confirming the use of transport‑layer security. An HTTP request returned a 404 status with the page title "404: NOT_FOUND," indicating that no public content was served at the time of analysis.

The domain was classified as a brand‑impersonation campaign targeting Solana and labeled as a crypto‑scam, although the actual payload or phishing page has not been captured. VirusTotal reports show that the domain was scanned by 93 vendors without any detections, but this absence of flags does not constitute evidence of benign intent. Independent security blocklists have already flagged the domain; it is listed on three blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL, suggesting that threat‑intel sources have observed malicious activity associated with the host. Because the site is currently offline, direct observation of the phishing content is not possible, leaving the exact lure or credential‑harvesting mechanism uncertain.

Defenders should continue to treat the domain as malicious, ensure that DNS‑based filtering solutions block resolution to 64.29.17.195, and add the domain to internal allow‑list exclusions. Monitoring of Vercel‑hosted subdomains for similar naming patterns is recommended, as is heightened scrutiny of any communications that reference Solana alongside suspicious URLs.