whatsolo[.]app

PhishDestroy identifies whatsolo.app as an active crypto drainer domain impersonating Solo Airdrop, a legitimate cryptocurrency airdrop platform. This domain is currently under investigation and has been assigned a generic phishing threat type. The site remains active and poses a significant risk to users attempting to claim fraudulent airdrops.

This domain was flagged by 1 of 95 VirusTotal vendors as of June 2025, indicating a lack of immediate detection despite its malicious intent. Whatsolo.app was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 27, 2025, and resolves to the IP address 47.237.134.81. The domain utilizes a Let’s Encrypt SSL certificate to appear legitimate, and its recent creation date suggests an opportunistic campaign targeting crypto enthusiasts. Trust scores are currently unavailable due to its under-investigation status, but the absence of VirusTotal detections does not equate to safety.

The current status of whatsolo.app remains active, with no confirmed blocklist entries at this time. Users are strongly advised to avoid interacting with this domain, particularly when prompted to connect cryptocurrency wallets. PhishDestroy recommends verifying unknown domains against its database before engaging. Additionally, users should enable wallet transaction alerts, avoid unsolicited airdrop claims, and report suspicious domains to PhishDestroy to aid in collective threat intelligence. Exercise heightened caution with domains registered in 2025, as they may represent emerging threats.