claim-solana[.]com

Analysis indicates that claim-solana.com was registered through IONOS SE on 24 February 2025. The domain resolves to the IPv6 address 2607:f1c0:100f:f000::200, which belongs to AS8560 operated by IONOS SE and is geolocated in the United States. No TLS certificate is presented, and an HTTP request returns a 404 status, confirming that the site is currently offline. The page title retrieved during the brief availability period was “Solana Giveaway - Claim,” and the brand target is explicitly listed as Solana, indicating a brand‑impersonation attempt aimed at cryptocurrency users.

The domain appears on two independent anti‑phishing blocklists, PhishDestroy and ScamSniffer, and has a Scamadviser trust score of 16 out of 100, reflecting a high likelihood of malicious intent. The authoritative nameservers are ns1051.ui-dns.de, ns1104.ui-dns.com, ns1108.ui-dns.biz, and ns1118.ui-dns.org, all of which are typical of IONOS‑hosted domains. VirusTotal reports that the domain was examined by 95 scanning engines, none of which raised a detection at the time of analysis; however, the absence of detections does not guarantee safety. The primary uncertainty concerns any residual infrastructure that may be reused for future campaigns, as the site is presently inaccessible but the hosting resources remain under the control of the registrant.

Defenders should continue to block the domain at perimeter devices, monitor the associated IP address for any re‑activation, and add the domain to internal watchlists. Additional investigation of the nameserver infrastructure and any related domains registered by the same entity may reveal further malicious activity. Until the domain is definitively taken down, it should be treated as a high‑risk indicator for Solana‑related phishing attempts.