coldpalmeronsol[.]xyz

Analysis indicates that coldpalmeronsol.xyz is an active brand impersonation website associated with an Airdrop Scam theme. The page title, 'COLD PALMER Airdrop', suggests an attempt to attract visitors with promises of promotional rewards or token distributions. Such sites commonly attempt to persuade users to connect digital wallets, disclose sensitive information, or authorize transactions that may result in financial loss. Given its active status and high-risk classification, interactions with the site should be considered unsafe.

Infrastructure analysis reveals several indicators that support the risk assessment. The domain is flagged by 2 of 95 VirusTotal security vendors and appears on 3 security blocklists. Registration records show the domain was created on May 27, 2026 through NAMECHEAP INC. The domain resolves to IP address 188.114.96.3, with hosting infrastructure located in the US under AS13335 Cloudflare, Inc. The site uses a Let's Encrypt / E8 SSL certificate. Intelligence sources report blocking by PhishDestroy, MetaMask, and SEAL. These indicators collectively suggest that the domain has attracted security scrutiny despite its relatively recent creation date.

Users who visited coldpalmeronsol.xyz should avoid reconnecting wallets, submitting credentials, or approving any pending requests associated with the site. If wallet access was granted, users should immediately review recent activity, revoke unnecessary permissions, and monitor accounts for unauthorized transactions. Any credentials entered on the site should be changed as a precaution. Organizations and security teams should consider blocking the domain and IP address 188.114.96.3, review logs for related access attempts, and maintain monitoring for additional infrastructure linked to the same campaign. The domain remains active, which means exposure risk continues at the time of assessment.