solanavolumebot[.]org

This domain, www.solanavolumebot.org, is flagged as an active crypto scam impersonating the Solana blockchain platform. Infrastructure analysis reveals the site is hosted on Amazon Web Services (AS16509) in the United States, resolving to IP 216.198.79.65. The domain was registered on October 7, 2025, through Name.com, Inc., and is currently active with a 301 HTTP redirect status. Nameservers point to Vercel (ns1.vercel-dns.com, ns2.vercel-dns.com), and the SSL certificate is issued by Google Trust Services (WE1). Detected technologies include Tailwind CSS, jsDelivr, Cloudflare, and HTTP/3, suggesting a modern frontend stack commonly used in phishing operations. The page title, 'Solana Volume Bot - Advanced Trading Volume & Liquidity Solutions for Solana,' directly references Solana, aligning with the scam type classified as brand impersonation. The domain appears on one security blocklist (PhishDestroy) and is flagged by one of 95 security vendors on VirusTotal, indicating limited but confirmed malicious activity. Gridinsoft assigns a trust score of 0/100, further supporting its high-risk classification. Defenders should treat this domain as a confirmed threat. Immediate actions include blocking the domain and its resolving IP at the network level, monitoring for related infrastructure (e.g., Vercel-hosted subdomains or Cloudflare-protected endpoints), and alerting users to the impersonation risk. While the exact mechanics of the scam (e.g., fake trading tools, wallet drainers) are not yet analyzed, the combination of brand targeting, recent registration, and low detection rates suggests a targeted campaign. Further investigation into associated wallets or transaction patterns is recommended to disrupt potential financial fraud.