solanaslars[.]netlify[.]app

This domain, solanaslars.netlify.app, is identified as a high-risk crypto drainer phishing site specifically targeting Solana blockchain users. Analysis indicates the infrastructure was designed to impersonate legitimate Solana services, tricking victims into connecting their wallets to a malicious drainer kit. Once connected, the drainer automatically siphons cryptocurrency assets from the victim’s wallet without authorization, leading to irreversible financial losses. The threat is classified as a crypto drainer due to its direct targeting of wallet credentials and automated asset theft mechanisms. Evidence supporting this assessment includes detection by 1 of 95 security vendors on VirusTotal, with the domain appearing on at least one security blocklist. Infrastructure analysis reveals the site was registered through Netlify and resolved to the IP address 63.176.8.218. The SSL certificate is issued by DigiCert Inc, a common feature in phishing campaigns to mimic legitimacy. Technologies detected on the domain include Netlify hosting and HTTP Strict Transport Security (HSTS), which are frequently leveraged by threat actors to evade detection and maintain operational security. The page title, 'Site not found,' suggests the domain may have been taken offline or altered post-compromise, though residual risk remains for users who interacted with it prior to deactivation. Users who visited solanaslars.netlify.app or connected their Solana wallet to this domain should immediately disconnect the wallet from all dApps and revoke any suspicious permissions. It is critical to transfer remaining assets to a new, secure wallet using a clean device to prevent further compromise. Monitor transaction history for unauthorized transfers and report the incident to relevant blockchain security teams for further analysis. Given the high-risk nature of crypto drainers, affected users should assume their credentials are compromised and avoid reusing passwords or seed phrases across platforms. Proactive measures, such as enabling hardware wallet authentication and multi-signature requirements, are recommended to mitigate future risks.