sol-claimer[.]lol

The domain sol-claimer.lol has been identified as a crypto drainer phishing threat, designed to trick users into connecting their cryptocurrency wallets and subsequently draining their funds. Although no specific brand impersonation was detected, the domain's name and setup suggest it targets Solana ecosystem users. The drainer kit used remains unidentified, but the domain's behavior aligns with common crypto wallet phishing techniques.

Technical analysis reveals that VirusTotal flags this domain with a score of 1/95, indicating poor detection by security vendors. The domain was registered on April 28, 2026, through Global Domain Group LLC and resolves to IP address 104.21.77.32. It appears on three security blocklists but is not listed on Google Safe Browsing. The page title, "Redirecting...", and the use of a Let's Encrypt SSL certificate (serial E7) are typical indicators of a phishing site designed to evade initial scrutiny.

Currently, the domain is offline, suggesting it may have been taken down or abandoned. However, users who may have interacted with it earlier should revoke any permissions granted to the site and monitor their wallets for unauthorized transactions. The remaining risk is low due to the domain's offline status, but similar domains may emerge. Users are advised to always verify URLs before connecting wallets and use hardware wallets or secondary security measures for high-value assets.