# www.sol-claim.live — SUSPICIOUS

> The crypto drainer domain sol-claim.live poses an elevated threat, flagged by 4/95 VirusTotal vendors. Avoid this domain to prevent cryptocurrency theft.

## Summary
PhishDestroy identifies sol-claim.live as an active crypto drainer domain designed to illicitly transfer cryptocurrency assets from unsuspecting victims. This domain leverages deceptive tactics, likely mimicking legitimate cryptocurrency services or airdrop campaigns to trick users into connecting their wallets. The threat type is classified as a crypto drainer, which typically involves malicious smart contracts or fraudulent transaction signatures to siphon funds directly from compromised wallets. No specific brand or drainer kit has been directly attributed to this domain in open-source intelligence, but its operational pattern aligns with known crypto drainer campaigns observed in the wild.  

This domain was flagged by 4 out of 95 VirusTotal security vendors, indicating partial detection but not universal coverage. The domain resolves to the IP address 64.29.17.65 and utilizes a Let's Encrypt SSL certificate, which may be used to lend an air of legitimacy to its fraudulent activities. The registrar for this domain is not specified in available intelligence, and the creation date remains undisclosed. As of the latest assessment, this domain has not been marked as malicious by Google Safe Browsing (GSB), and the exact count of blocklists it appears on is not publicly documented. These technical indicators suggest a relatively new or opportunistic campaign rather than a long-standing malicious infrastructure.  

Currently, sol-claim.live remains active and poses an elevated risk to users who may interact with it, particularly those engaged in cryptocurrency transactions or airdrop participations. Immediate actions for users include avoiding any interaction with this domain, verifying the authenticity of cryptocurrency-related websites, and ensuring wallet connections occur only on trusted platforms. Organizations are advised to block this domain at the network level and monitor for any signs of associated malicious infrastructure. While the current risk is elevated, proactive blocking and user awareness can significantly mitigate potential threats. Remaining vigilance and adherence to security best practices are critical to reducing exposure to such crypto drainer campaigns.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 64.29.17.65

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c8ed83ce-81d8-4ca2-aefa-e1993860b9be
- PhishDestroy: https://phishdestroy.io/domain/www.sol-claim.live/
- LLM endpoint: https://phishdestroy.io/domain/www.sol-claim.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.sol-claim.live/
Last updated: 2026-03-25