deeperchain-solana-swap[.]deeper[.]network

The domain deeperchain-solana-swap.deeper.network was observed on 2026-07-12 as an active site that claims to provide a “Deeper Network Bridge”. The site is currently classified under the brand-impersonation threat type, targeting the Solana brand, and is listed as under investigation. Infrastructure analysis shows the domain resolves to the IP address 172.66.159.80, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. Authoritative name servers are james.ns.cloudflare.com and brenda.ns.cloudflare.com, indicating the domain’s DNS is also hosted by Cloudflare. The TLS certificate is issued by Google Trust Services under the WE1 root, providing a valid HTTPS connection. Detected front-end technologies include Ant Design, HTTP Strict Transport Security (HSTS), and Cloudflare Browser Insights, confirming the use of Cloudflare’s security and performance services. The site is registered through Squarespace Domains II LLC, a registrar commonly used for legitimate and malicious domains alike. The page title “Deeper Network Bridge” does not reference the impersonated brand, but the domain name and URL path contain the keyword “solana”, suggesting an attempt to lure Solana users. The scam type is identified as cryptocurrency, and the domain appears on a single security blocklist, flagged by PhishDestroy. The Gridinsoft trust score of 0 / 100 further indicates a high-risk assessment, while the HTTP response code is 200, confirming the site is reachable. Defenders should add the domain to web-filtering and DNS-sinkhole policies, especially for networks that support Solana wallets or related services. Continuous monitoring of the IP address and associated Cloudflare assets is advised, as the infrastructure can be repurposed for other malicious campaigns. Incident response teams should treat any credential or transaction requests originating from this domain as fraudulent and advise users to avoid interaction.