claimmysol[.]org

Analysis of claimmysol.org indicates a high-risk brand impersonation domain targeting Solana cryptocurrency users. The domain was registered on August 2, 2025, through Name.com, Inc., and remains active as of July 12, 2026. The page title, 'ClaimMySol - Recover SOL from Unused Accounts,' suggests a fraudulent scheme offering to recover unused SOL tokens, a common tactic to lure victims into disclosing wallet credentials or transferring funds. Infrastructure analysis reveals the domain resolves to IP address 18.208.88.157 and utilizes technologies including Unpkg and Netlify, with a Let's Encrypt SSL certificate and HSTS enabled. The domain has been flagged by multiple security sources, including PhishDestroy and BLP-Malware, and appears on two security blocklists. Gridinsoft assigns a trust score of 0/100, and AlienVault OTX lists the domain in 23 threat intelligence pulses, further corroborating its malicious classification. While only 2 of 95 security vendors on VirusTotal currently flag the domain, this does not indicate safety, as detection rates can vary based on submission timing and vendor coverage. Defenders should treat this domain as actively malicious and prioritize blocking it at the DNS or network level. Users should be warned against interacting with the site, particularly those holding Solana assets, as the domain likely facilitates credential theft or unauthorized fund transfers. Additional monitoring of related infrastructure is recommended to identify potential secondary domains or campaigns.