solana-token-launchpad-ruddy[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat targeting Solana users. Analysis indicates the infrastructure is designed to mimic a legitimate token launchpad, a tactic commonly used to deceive victims into disclosing wallet credentials or transferring assets under false pretenses. The domain poses a significant risk due to its active status and direct association with cryptocurrency fraud. Infrastructure analysis reveals the domain resolves to IP address 64.29.17.131, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. It is registered through Vercel Inc. and secured with an SSL certificate issued by Google Trust Services (WR1). The domain appears on one security blocklist and is explicitly blocked by PhishDestroy. VirusTotal reports 14 out of 95 security vendors flagging the domain as malicious, while Google Safe Browsing classifies it as phishing. The page title, 'Solana Token Launchpad,' reinforces the impersonation of the Solana brand, increasing the likelihood of user deception. Mitigation steps include immediate blocking of the domain and its associated IP address (64.29.17.131) at the network perimeter. Security teams should monitor for any attempts to access this domain within their environments and correlate logs with cryptocurrency wallet activity to detect potential unauthorized transactions. Users should be educated on verifying official Solana communication channels and launchpads, particularly those hosted on third-party platforms like Vercel. Additionally, organizations should review their phishing detection rules to account for brand impersonation tactics involving cryptocurrency-related lures.