claim-islandsgames[.]com

This domain, claim-islandsgames.com, is actively engaged in brand impersonation targeting the Solana blockchain ecosystem. The site presents itself as a legitimate gaming or trading platform under the title 'Islands | Build, Fight and Trade on Solana,' aiming to deceive users into interacting with fraudulent smart contracts, disclosing wallet credentials, or transferring assets to attacker-controlled addresses. The infrastructure is designed to exploit trust in the Solana brand, likely distributing malware or facilitating cryptocurrency theft through social engineering tactics such as fake airdrops, token claims, or investment opportunities. Given the domain's focus on financial transactions and blockchain interaction, the threat is classified as elevated, with potential for significant user asset compromise. Analysis indicates the domain was registered on June 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious infrastructure. The domain resolves to the IP address 188.114.97.3 and is protected by Cloudflare, which obscures backend hosting details. Security vendor detections on VirusTotal stand at 6 out of 95, while the domain appears on three independent security blocklists. The SSL certificate is issued by Google Trust Services, adding a layer of apparent legitimacy. Technologies detected include HTTP/3, which may be leveraged to evade traditional network-based detection mechanisms. The Gridinsoft trust score for this domain is 0 out of 100, reinforcing its malicious classification. Users who have visited claim-islandsgames.com or interacted with its content should immediately cease all engagement and revoke any connected wallet permissions. If cryptocurrency transactions were initiated, affected parties should document all details, including transaction hashes and wallet addresses, and report the incident to relevant blockchain analytics platforms for potential asset tracing. It is recommended to scan local devices for malware, as the site may have delivered payloads via drive-by downloads or malicious scripts. Browser extensions or applications associated with the domain should be uninstalled, and all credentials, particularly those related to cryptocurrency wallets, should be rotated. Monitoring for unauthorized transactions on linked wallets is critical, as attackers may retain access even after initial interaction.