zetachain[.]solanium[.]shop

The domain zetachain.solanium.shop was registered on 2026-03-03 and is presently taken offline. DNS resolution returns the IP address 188.114.97.3, which is advertised as a Cloudflare, Inc. host (AS13335) located in the United States. No TLS certificate was observed for the site, indicating that HTTPS connections are not supported. The page title returned by the server reads "ZETA Airdrop | ZetaChain," suggesting the site is intended to masquerade as an official ZetaChain airdrop distribution.

Malware analysis flags the content as an "Airdrop Scam" phishing kit, classifying the operation as a crypto‑related scam. Independent security aggregators have listed the domain on two blocklists: PhishDestroy and ScamSniffer. VirusTotal scans reported that two of ninety‑three AV engines flagged the domain, providing a modest but non‑zero detection signal.

The limited visibility of the site—no SSL, offline status, and a small detection count—leaves the full scope of the campaign uncertain, including whether any credential harvesting or wallet address harvesting mechanisms were active before takedown. Defenders should continue to block resolution to 188.114.97.3, enforce DNS sink‑hole rules for the domain, and monitor for related subdomains or future registrations under the same registrar. Threat intelligence feeds should be updated to reflect the domain’s presence on existing blocklists, and any inbound traffic from the IP should be examined for anomalous crypto‑related activity.