solclaim[.]world

On July 22, 2026 the domain solclaim.world was identified as a wallet/seed phishing infrastructure targeting users of the Solana ecosystem. The site presented the page title “Access the new digital update for active platform users,” a generic lure that aligns with the documented scam type. Technical analysis shows the domain was hosted on nameservers fdomain.earth.orderbox-dns.com, fdomain.mars.orderbox-dns.com, and fdomain.mercury.ord, and resolved to IP address 176.57.66.112. The IP is registered to DDOS‑GUARD LTD in Russia (ASN 57724) and was associated with the registrar TILDAPUBLISHING‑EDGECENTER, also under ASN 57724.

No SSL certificate was observed, indicating an unencrypted HTTP service when the site was online. VirusTotal recorded a single positive detection out of 95 scanned security vendors, suggesting limited but notable awareness among scanning engines. Independent blocklists, including PhishDestroy and ScamSniffer, have listed the domain, and the Gridinsoft trust score is 0 / 100, reinforcing its malicious classification.

The domain currently reports an offline status, but the historical presence on two security blocklists confirms it was previously active. Defenders should continue to block solclaim.world at DNS and proxy layers, monitor traffic to the associated IP for any resurgence, and add the domain to internal threat intelligence feeds. Continuous re‑evaluation of the IP’s reputation is advised, as the hosting provider may be reused for future campaigns.