vibeguysolana[.]com

The domain vibeguysolana.com was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (ASN 13335) with the IP address 188.114.96.3 located in the United States. DNS resolution points to dean.ns.cloudflare.com and priscilla.ns.cloudflare.com, confirming Cloudflare as the authoritative nameserver. The site presents a Let’s Encrypt certificate (E8) served over HTTP/3, but currently returns a 522 timeout error, as shown in the page title “vibeguysolana.com | 522: Connection timed out”. No page content has been captured, so the exact malicious payload cannot be verified beyond the classified scam type of “Crypto Scam” and the explicit impersonation of the Solana brand.

VirusTotal analysis recorded 3 positive detections out of 93 scanning engines, indicating that a subset of security vendors have flagged the domain as malicious. The domain appears on three external blocklists and has been proactively blocked by PhishDestroy, MetaMask, and SEAL, confirming that threat‑intelligence feeds regard it as a credential‑theft or crypto‑drain vector. The short registration age, Cloudflare edge hosting, and use of a trusted SSL certificate are consistent with common tactics employed in brand‑impersonation campaigns targeting cryptocurrency users.

Defenders should add vibeguysolana.com and its resolved IP 188.114.96.3 to network and DNS deny lists, enforce URL filtering for the domain, and implement continuous re‑resolution monitoring to detect any future re‑activation. Users of Solana‑related services should be advised that any unsolicited communication referencing vibeguysolana.com is unauthenticated and likely malicious, and that interaction with the domain should be avoided until it is definitively taken offline.