claimenabler[.]live

This domain, claimenabler.live, is identified as an active brand impersonation threat specifically targeting the Solana ecosystem. The site presents itself as a legitimate hub for decentralized applications (dApps) within the Solana network, aiming to deceive users into disclosing sensitive credentials or transferring digital assets under false pretenses. Analysis confirms the domain is currently operational and poses a high-risk threat to individuals interacting with Solana-based platforms. Infrastructure analysis reveals the domain was registered on May 23, 2024, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 172.67.160.237, hosted on Cloudflare’s AS13335 network in the United States. The domain appears on three distinct security blocklists and is flagged by 2 of 95 security vendors on VirusTotal, including detections from PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let’s Encrypt (serial number E8), a common choice for both legitimate and malicious sites due to its accessibility. The page title, 'Solana Ecosystem • Premier dApps Hub,' closely mimics official Solana branding to enhance credibility and lure targets. Current status indicates the domain remains active and unmitigated, continuing to pose a significant risk to users. Organizations and individuals are advised to block the domain and its associated IP address (172.67.160.237) at the network perimeter. End-users should verify the authenticity of any Solana-related websites by cross-referencing official sources and avoiding interaction with untrusted domains. Security teams are recommended to monitor for connections to this IP and domain within network logs, particularly those involving cryptocurrency transactions or credential submissions. Immediate reporting to relevant security communities and brand protection teams is encouraged to facilitate takedown efforts.