darpradar[.]pages[.]dev

The domain darpradar.pages.dev is actively involved in a cryptocurrency scam targeting Solana users. It has been detected by 3 out of 95 vendors on VirusTotal and is listed on two public blocklists, including PhishDestroy and ScamSniffer. The site masquerades as a legitimate Solana service, using the page title 'Sablier | Onchain Token Distribution' to deceive users.

Registered through Cloudflare, Inc., and hosted on an IP address in the United States, darpradar.pages.dev employs SSL certification from Google Trust Services. This setup might lend an air of legitimacy to unsuspecting visitors. The domain's creation date is noted as February 21, 2026, with PhishDestroy detecting it shortly thereafter on February 26, 2026. The platform risk score stands at a concerning 76 out of 100, indicating a high level of threat.

The impersonation of Solana, a well-known cryptocurrency brand, suggests a targeted approach to exploit the trust of its user base. With the domain being flagged by a limited number of security vendors, it highlights the ongoing challenge of rapid threat detection and mitigation in the cybersecurity landscape. Phishing domains like this exploit the critical window between domain registration and antivirus database updates, capturing victims before widespread detection occurs.