claimsol-8fx[.]pages[.]dev

The domain claimsol-8fx.pages.dev is identified as a phishing site involving brand impersonation of Solana. This domain was created to deceive users by mimicking the Solana brand, potentially targeting cryptocurrency users. As of now, the site has been taken offline and is under investigation for its involvement in brand impersonation scams.

Technical indicators reveal that claimsol-8fx.pages.dev was created on December 18, 2024, and registered through Cloudflare, Inc. The domain resolves to IP address 188.114.96.3, located in the US under AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1. Despite no detections from VirusTotal's 95 vendors, the domain is flagged on two security blocklists: PhishDestroy and ScamSniffer. The page title observed was solclaim.cc, and the HTTP status currently returns 403.

For individuals who interacted with claimsol-8fx.pages.dev, especially those involved in cryptocurrency transactions, it is advisable to revoke token approvals and transfer funds to a new wallet. If credential or login information was compromised, changing passwords, enabling two-factor authentication, and monitoring for fraudulent activity are recommended. Users can report suspicious activity related to this domain to security blocklists such as PhishDestroy and ScamSniffer for further action.