nothingmorethantest[.]top

The domain nothingmorethantest.top is a phishing site engaged in brand impersonation, specifically targeting the Solana cryptocurrency ecosystem. It poses as a legitimate airdrop campaign under the false pretense of 'Claim Airdrop - Meteora', a tactic commonly used to deceive users into connecting wallets or divulging sensitive information. No crypto drainer kit was identified, but the site was operational long enough to present an elevated risk to visitors. As of the latest verification, nothingmorethantest.top has been taken offline.

Technical indicators confirm the malicious nature of nothingmorethantest.top. The domain was flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, Gridinsoft, and SOCRadar, with a Gridinsoft trust score of 0 out of 100. It appears on one security blocklist, PhishDestroy, and was registered on November 9, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to the IP address 57.129.97.29, hosted on OVH SAS infrastructure in Germany (AS16276), and uses Cloudflare nameservers (chad.ns.cloudflare.com and wanda.ns.cloudflare.com). No SSL certificate was issued for the site.

Users who interacted with nothingmorethantest.top should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to mitigate potential losses. If credentials or private keys were entered, change passwords on all associated accounts and enable two-factor authentication. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in takedown efforts and prevent further victimization.