tontg[.]info

This domain, tontg.info, is flagged as a crypto scam impersonating Solana, with elevated risk due to confirmed brand impersonation and infrastructure indicators. Registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain resolves to IP 94.141.122.141, hosted under AS205775 NEON CORE NETWORK LLC in Finland. Nameservers point to dns19.parkpage.foundationapi.com and dns20.parkpage.foundationapi.com, a pattern commonly associated with low-reputation or disposable hosting setups. The SSL certificate, issued by GoDaddy.com, Inc. via the Go Daddy Secure Certificate Authority - G2, provides basic encryption but does not validate legitimacy. Technologies detected include Nginx and OpenResty, which are frequently used in both legitimate and malicious web infrastructures.

Analysis indicates the domain was taken offline prior to assessment, though its prior activity remains a concern. The page title explicitly matches the target brand, Solana, reinforcing the impersonation intent. One security vendor on VirusTotal flagged the domain, and it appears on at least one blocklist, including PhishDestroy. Gridinsoft assigns a trust score of 0/100, reflecting high suspicion. While no additional context is available regarding the specific scam mechanics or victim interactions, the combination of brand impersonation, hosting on a low-reputation ASN, and detection by security vendors confirms the elevated risk classification.

Defenders should treat this domain as malicious and prioritize blocking it at DNS and network levels. Historical logs should be reviewed for connections to 94.141.122.141 or the domain itself. Given the crypto scam classification, organizations handling cryptocurrency transactions or Solana-related assets should alert users to potential phishing risks associated with this infrastructure. Further investigation into the hosting provider and nameserver patterns may reveal additional linked domains.