# godls.network — MALICIOUS — Crypto Drainer (Solana Drainer)

> godls.network, linked to Solana crypto draining, is offline but flagged on multiple blocklists. Learn about its risk and mitigation steps.

## Summary
PhishDestroy classifies godls.network as a low-risk crypto drainer domain. Although actively involved in malicious activity, its current offline status reduces immediate threat potential. Users should remain alert to its prior associations and avoid any related links.

The domain godls.network was tied to a Solana drainer kit targeting crypto wallets, advertised under the page title "GODL | Airdrop." It appeared on three distinct security blocklists and resolved to IP 188.114.97.3. Registered via Cloudflare, Inc., the domain was flagged by 2 out of 95 VirusTotal vendors, indicating some detection by security engines.

To mitigate risk, users should avoid interacting with any communications referencing godls.network or similar Solana airdrop schemes. Employing updated endpoint protections and network filters can help block residual threats. Continuous monitoring of blocklists and disabling suspicious domains remains recommended to guard against emerging variants.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: dead (HTTP 403)
- Drainer type: Solana Drainer
- Scam type: Airdrop Scam
- Kit: Airdrop Scam
- Page title: GODL | Airdrop

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 2a06:98c1:3120::3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ligia.ns.cloudflare.com steven.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ae468-69d4-70f8-b529-7f6e3b54af8f.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/290f55e7-1f22-420e-b8c8-7ff78a7c4c8d
- PhishDestroy: https://phishdestroy.io/domain/godls.network/
- LLM endpoint: https://phishdestroy.io/domain/godls.network/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/godls.network/
Last updated: 2026-03-19