solrecover-reclaimsolorg[.]pages[.]dev

This domain, solrecover-reclaimsolorg.pages.dev, is flagged as a high-risk brand impersonation threat specifically targeting Solana cryptocurrency users. The page title, ReclaimSOL — Clear Guides to Recovering SOL from Unused Accounts, mimics legitimate Solana recovery services to deceive victims into disclosing wallet credentials or transferring funds. Analysis indicates the presence of a likely drainer kit designed to automate unauthorized transactions from compromised wallets, a common tactic in cryptocurrency phishing campaigns.

Technical indicators reveal the domain was registered on March 11, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.44.201, hosted on AS13335 within the United States. VirusTotal detection shows 1 out of 95 security vendors flagging the domain as malicious, while it appears on a single security blocklist. The SSL certificate identifier is E7, and the domain is currently not listed on Google Safe Browsing. Infrastructure analysis confirms the domain remains active and unmitigated by the registrar.

As of the latest assessment, solrecover-reclaimsolorg.pages.dev continues to operate without takedown, posing an ongoing risk to Solana users. Immediate response actions should include blocking the domain and associated IP at the network perimeter, as well as alerting users to verify recovery services exclusively through official Solana channels. The remaining risk is classified as high due to the domain's active status, targeted impersonation of a major cryptocurrency brand, and low detection rate across security platforms.