redirect-sol-finder-c4343c[.]vercel[.]app
“404: NOT_FOUND”
redirect-sol-finder-c4343c.vercel.app — Contenido no disponible. Suplantación de marca: Solana; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 1/93 (Trustwave); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrador: Tucows.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain redirect-sol-finder-c4343c.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and is currently flagged as an elevated‑risk brand‑impersonation site targeting Solana. DNS resolution maps the domain to IP address 64.29.17.67, an Amazon.com, Inc. host (AS16509) located in the United States. The authoritative nameservers are ns1.vercel-dns-3.com, ns2.vercel-dns-3.com, ns3.vercel-dns-3.com, and ns4.vercel-dns-3.com, indicating deployment on the Vercel platform.
The site presented a TLS certificate issued by Google Trust Services under the WR1 issuer, and the HTTP response returned a 404 status with the page title "404: NOT_FOUND," confirming that the endpoint is no longer serving content. Threat intelligence reports list the domain on three security blocklists—PhishDestroy, MetaMask, and SEAL—and VirusTotal recorded a single positive detection out of ninety‑three scanners, reinforcing suspicion of malicious activity. Technical analysis identifies Vercel hosting and HSTS enforcement as the primary technology stack.
While the actual phishing content cannot be examined because the site is offline, the combination of brand‑impersonation labeling, the Solana target, and the classification as a crypto scam provides a clear threat profile. Defenders should continue to block the domain at DNS and proxy layers, monitor for other Vercel‑hosted subdomains exhibiting similar naming patterns, and incorporate the observed certificate and IP attributes into detection rules. Users of Solana‑related services should be warned about potential credential harvesting attempts linked to this infrastructure, and security teams are advised to update any threat‑intelligence feeds with the listed indicators of compromise.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Tecnologías · 2 identified
Cloud platform for frontend deployment, optimized for Next.js.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.