rugscannerai[.]pages[.]dev

Analysis of the domain rugscannerai.pages.dev indicates it is actively impersonating the Solana brand, posing a significant risk of brand impersonation. The domain was created on November 17, 2025, and is currently registered through Cloudflare, Inc. It has been flagged on two security blocklists, including ScamSniffer and PhishDestroy, suggesting that it may be involved in malicious activities. The domain's page title, 'RugScanAI - AI-Powered Solana Rug Pull Detection,' further supports the impersonation of Solana, as it purports to offer a service related to the detection of rug pulls, which are fraudulent activities in the cryptocurrency space where developers abandon a project and steal investors' funds. The exact content of the page and the nature of the activities conducted on this domain have not yet been fully analyzed, but the combination of the page title and the domain's presence on security blocklists raises concerns about its legitimacy. Defenders should monitor network traffic for connections to this domain and consider blocking it to prevent potential exposure to phishing attacks. The domain uses HSTS, Cloudflare, and HTTP/3 technologies, which can enhance its credibility and make it more challenging for users to identify it as malicious. Additionally, the domain is protected by an SSL certificate from Google Trust Services, which may further lend it an air of legitimacy. Given the domain's active status and the specific targeting of Solana, security teams should remain vigilant and educate users about the risks of visiting unverified websites, especially those claiming to offer financial or security services related to cryptocurrencies. The Gridinsoft trust score of 0/100 highlights the domain's high-risk profile, and while VirusTotal has not flagged it yet, this should not be taken as a sign of safety. Continuous monitoring and proactive security measures are recommended to mitigate the potential impact of this threat.