solanadev[.]io

solanadev.io is a newly registered domain (created 21 February 2026) that has been observed hosting a crypto‑related scam impersonating the Solana brand. The site presents the page title “SolanaDev.io”, which directly references the targeted brand, and uses a Let’s Encrypt R12 certificate, indicating TLS encryption without any extended validation. Infrastructure analysis shows the domain resolves to IP 216.198.79.1, an address owned by Amazon.com, Inc. (AS16509) located in the United States. The hosting provider appears to be Vercel, and the site enforces HTTP Strict Transport Security, while the HTTP response code is 307, suggesting a temporary redirect.

Nameservers are listed as ns1.bluehost.com and ns2.bluehost.com, a configuration commonly seen in compromised or abused hosting environments. The registrar is Network Solutions, LLC, and the domain is currently active. Reputation services flag the domain as malicious: Gridinsoft assigns a trust score of 0 / 100, and VirusTotal reports that 2 of 93 scanning engines have identified the domain as suspicious. The domain appears on one external security blocklist and is actively blocked by PhishDestroy, reinforcing the assessment of a high‑risk threat.

The threat type is recorded as a “Crypto Scam” with a high risk level. Defenders should add 216.198.79.1 and the fully qualified domain name solanadev.io to outbound and inbound blocklists, monitor DNS queries for the associated nameservers, and enforce TLS inspection to capture the redirect behavior. Because the site is only a month old, continuous re‑evaluation is advised to detect any changes in hosting or content. In the absence of further public content analysis, the available indicators alone justify immediate remediation to protect users from potential credential or fund theft targeting Solana investors.