gummy[.]pages[.]dev

This domain, gummy.pages.dev, is flagged as an active brand impersonation threat targeting the Solana cryptocurrency ecosystem. Analysis indicates the site is designed to deceive users into believing it is an official Solana-related service, as evidenced by its page title, 'Gummy on Sol,' which directly references the Solana blockchain. The domain remains operational and poses a high risk to individuals interacting with cryptocurrency platforms. Infrastructure analysis reveals the domain was registered on April 21, 2024, through Cloudflare, Inc., and resolves to the IP address 188.114.96.3, hosted on Cloudflare’s network (AS13335). Despite its malicious intent, the domain has not been flagged by any of the 95 vendors on VirusTotal as of the latest scan. However, it appears on three security blocklists, including PhishDestroy, ScamSniffer, and Enkrypt. The SSL certificate is issued by Google Trust Services (WE1), a common practice among phishing sites to appear legitimate. The domain remains active and continues to resolve, indicating ongoing malicious activity. Users are advised to exercise extreme caution and avoid interacting with gummy.pages.dev or any associated links. Network administrators should consider blocking the IP address 188.114.96.3 and monitoring for connections to this domain. Cryptocurrency users should verify the authenticity of any Solana-related service through official channels before engaging with it.