sachidrop[.]xyz

This domain, sachidrop.xyz, is identified as a brand impersonation threat targeting Solana, a cryptocurrency platform. Analysis indicates the site was designed to mimic legitimate airdrop campaigns, as evidenced by the page title "Sachicoin | Airdrop." The domain is currently offline, but prior activity suggests malicious intent to deceive users into disclosing sensitive information or transferring assets. Infrastructure analysis reveals sachidrop.xyz was flagged by 5 of 95 security vendors on VirusTotal, indicating moderate detection coverage. The domain was registered through Web Commerce Communications Limited on February 21, 2026, and resolved to the IP address 172.67.159.76. It appears on 2 security blocklists and has a trust score of 0/100 from Gridinsoft. Additionally, it was referenced in 1 threat intelligence pulse on AlienVault OTX and blocked by multiple security tools, including ScamSniffer and PhishDestroy. The domain has since been taken offline, reducing immediate risk. However, users who interacted with sachidrop.xyz should monitor for unauthorized transactions or account access. It is recommended to verify all airdrop-related communications through official Solana channels and report any suspicious domains to relevant security teams for further investigation. Infrastructure associated with this domain, such as the IP address, should be treated as potentially compromised and monitored for related malicious activity.