claimyoursol-7v8[.]pages[.]dev

Analysis of claimyoursol-7v8.pages.dev shows a newly registered domain (created February 21 2026) that is being used to impersonate the Solana brand in a crypto‑scam context. The domain resolves to IP 172.66.47.183, which belongs to AS13335 Cloudflare, Inc. and is located in the United States. TLS is provided by a Google Trust Services certificate identified as “WE1”, indicating a legitimate certificate chain but offering no protection against the underlying malicious intent.

The authoritative nameservers are arturo.ns.cloudflare.com and deb.ns.cloudflare.com, both owned by Cloudflare, confirming the registrar as Cloudflare, Inc. The web server returns HTTP 403, and the page title presented by the host is “Suspected phishing site | Cloudflare”, a generic warning page rather than a custom landing page. The site has been blocked by PhishDestroy and appears on one security blocklist, while the Gridinsoft trust score is 0 out of 100, reflecting extreme distrust. VirusTotal reports a single positive detection out of 93 scanning engines, reinforcing the suspicion of malicious activity.

The domain is currently offline, which limits immediate observation but does not eliminate the risk of future reactivation. Defenders should continue to monitor the IP address and associated Cloudflare accounts for any resurgence, add the domain to internal blocklists, and enforce strict outbound filtering for Solana‑related traffic to prevent credential harvesting. Because the domain’s content has not been publicly captured, the exact phishing vector remains uncertain; however, the combination of brand impersonation, crypto‑scam classification, low trust score, and active blocklist entries provides sufficient evidence to treat the domain as a high‑risk threat.