# solomons-airdrop.com — SUSPICIOUS

> solomons-airdrop.com is a low-risk crypto drainer domain currently offline. Avoid interaction and verify crypto sites carefully to stay secure.

## Summary
PhishDestroy identifies solomons-airdrop.com as a domain associated with crypto draining activities, posing a low risk to users. The domain was designed to deceive victims, potentially leading to unauthorized cryptocurrency access or theft. Users are urged to remain cautious when engaging with any unsolicited crypto airdrop offers.

The domain resolved to IP address 104.21.69.141 and was registered through Metaregistrar BV. It was created recently, on December 14, 2025, and appeared on one known security blocklist. VirusTotal analysis flagged the domain by 2 out of 95 security vendors. The page title found was "Just a moment...", a common tactic to mimic legitimate loading screens and lower suspicion.

Currently, solomons-airdrop.com is taken offline, reducing immediate risk. Users are recommended to avoid interacting with unknown crypto airdrop sites and verify URLs thoroughly. Employing updated security tools and consulting trusted sources can help mitigate exposure to emerging crypto scams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Scam type: Airdrop Scam
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2025-12-14 16:45:37
- Registrar: Metaregistrar BV
- Country: NL
- IP: 104.21.69.141
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: george.ns.cloudflare.com sky.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b1df1-2860-73fe-b1e1-201e9271c41d.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/88a3d641-e1fa-4a9d-bb87-43e70ae5a056
- PhishDestroy: https://phishdestroy.io/domain/solomons-airdrop.com/
- LLM endpoint: https://phishdestroy.io/domain/solomons-airdrop.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/solomons-airdrop.com/
Last updated: 2026-03-19