allocation-georgeplayclashroyale[.]com

The domain allocation-georgeplayclashroyale.com is identified as a brand impersonation threat specifically targeting Solana, a prominent blockchain platform. Analysis confirms the domain is currently offline, though it previously hosted content masquerading as legitimate Solana-related services. The page title, 'George Plays Clash Royale,' appears unrelated to the impersonated brand, suggesting an attempt to obfuscate the true intent of the infrastructure or exploit unrelated search traffic. Infrastructure analysis reveals the domain was flagged by 2 of 95 security vendors on VirusTotal, indicating limited but existing detection. It was registered through NiceNIC International Group Co., Limited, and resolves to the IP address 172.67.159.8, which is associated with Cloudflare services. The domain was created on December 8, 2025, and appears on 2 security blocklists. Additional technical indicators include the use of HTTP/3 and an SSL certificate issued by Google Trust Services. Gridinsoft assigned the domain a trust score of 0 out of 100, further corroborating its malicious classification. The domain has been taken offline, reducing immediate risk to users. However, the infrastructure may be reactivated or repurposed for future campaigns. Organizations and individuals are advised to block the domain and associated IP address (172.67.159.8) at the network level. Users should verify the authenticity of any communication or website claiming affiliation with Solana by cross-referencing official channels. Monitoring for similar domains registered through the same registrar or utilizing the same hosting infrastructure is recommended to preemptively mitigate related threats.