opneclawai[.]club

The domain opneclawai.club has been assessed as a confirmed brand impersonation threat targeting the Solana brand. The risk level is currently under investigation, but the site's impersonation of Solana and its presence on multiple security blocklists indicate a significant threat to users who may be misled into thinking they are interacting with legitimate Solana services.

Infrastructure analysis reveals that opneclawai.club resolves to the IP address 104.21.5.86 and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on April 25, 2026. The domain utilizes Cloudflare Browser Insights, Cloudflare, and HTTP/3 technologies. Despite these modern web technologies, the site's Gridinsoft trust score is 0/100, and it has appeared on 5 security blocklists, including MetaMask, PhishDestroy, SEAL, OISD, and Maltrail. VirusTotal has not yet flagged the domain, with 0/95 detections, which could indicate a new or evolving threat. The domain is secured with an SSL certificate from Let's Encrypt, which is a common practice among phishing sites to appear more trustworthy.

To mitigate the risks associated with brand impersonation, users are advised to verify the authenticity of any Solana-related services by only accessing them through official channels and verified URLs. Security teams should monitor and block the IP address 104.21.5.86 and ensure that the domain is added to organizational blocklists. Additionally, users should be educated to recognize common indicators of phishing, such as suspicious email domains, generic greetings, and requests for sensitive information. Regular updates to security software and browser extensions can also enhance protection against such threats.