skr-claim-dapp[.]pages[.]dev

This domain, skr-claim-dapp.pages.dev, is flagged as an active brand impersonation phishing site targeting Solana ecosystem users. The threat type is classified as high-risk due to its fraudulent representation of Solana’s official infrastructure, specifically mimicking Solana Mobile’s bonus allocation claims. The page title, 'SKR Bonus Allocation Claim – Solana Mobile,' reinforces the deception by leveraging Solana’s branding to trick victims into disclosing sensitive credentials or transferring assets.

Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on March 13, 2026, and currently resolves to the IP address 172.66.44.216, hosted under AS13335 (Cloudflare, Inc.) in the United States. The SSL certificate identifier is E7. Detection metrics indicate minimal but concerning scrutiny: the domain is flagged by 1 of 95 security vendors on VirusTotal and appears on one security blocklist. The domain’s creation date is suspiciously recent, and its reliance on Cloudflare’s infrastructure is consistent with tactics used to evade detection and takedown efforts.

As of the latest assessment, skr-claim-dapp.pages.dev remains active and poses a significant risk to users unfamiliar with Solana’s legitimate communication channels. Recommended actions include immediate blacklisting of the domain and IP address in enterprise security controls, dissemination of indicators of compromise (IOCs) to threat intelligence platforms, and user education emphasizing verification of official Solana domains. Organizations should monitor for connections to 172.66.44.216 and alert users to avoid interacting with any unsolicited Solana-related claims or bonus offers.