claim-solana-2025[.]onrender[.]com

The domain claim-solana-2025.onrender.com is a confirmed phishing site engaged in brand impersonation, specifically targeting the Solana cryptocurrency platform. It operated as an airdrop scam, presenting itself as a 'Solana Airdrop Event 2025' to deceive users into disclosing sensitive information or transferring funds. The site is currently taken offline, but it previously posed a direct threat as a cryptocurrency scam with no associated drainer kit detected.

Technical indicators for claim-solana-2025.onrender.com show 0 of 95 VirusTotal vendors flagged the domain, though Google Safe Browsing marked it for 'SOCIAL_ENGINEERING' phishing. It appeared on 1 security blocklist (PhishDestroy) and was registered through Render Services Inc. The domain resolved to the IP address 216.24.57.7, hosted on Render’s infrastructure (AS397273) in the US, and used nameservers ns.render.com. The SSL certificate was issued by Google Trust Services (WE1), and the site employed Cloudflare and HTTP/3 technologies. At the time of assessment, the HTTP status returned a 404 error.

Users who interacted with claim-solana-2025.onrender.com should immediately revoke any token approvals and transfer remaining funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts, and monitor for unauthorized transactions. Report the phishing domain to Google Safe Browsing, PhishDestroy, and the impersonated brand (Solana) to aid in takedown efforts. If credentials were entered, change passwords for all associated accounts and remain vigilant for follow-up phishing attempts.