yourwallet[.]solar

This domain, yourwallet.solar, is identified as a crypto drainer phishing infrastructure designed to siphon cryptocurrency assets from unsuspecting users. Crypto drainers operate by tricking victims into connecting their digital wallets to malicious smart contracts or scripts, which then execute unauthorized transactions, transferring funds to attacker-controlled addresses. The domain mimics legitimate wallet services, leveraging social engineering tactics such as fake airdrop claims, token swaps, or wallet recovery prompts to deceive users into interacting with the malicious infrastructure. Given the irreversible nature of cryptocurrency transactions, victims often face total loss of funds with no recourse for recovery. Analysis of the domain reveals several indicators of malicious intent. As of the latest scan, yourwallet.solar has 0 detections out of 95 security engines on VirusTotal, indicating it has not yet been widely flagged by automated systems. The domain was registered on April 10, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with low-cost and short-lived malicious domains. Infrastructure analysis shows the domain resolves to the IP address 216.198.79.1 and is currently listed on one security blocklist. The SSL certificate, issued by GlobalSign nv-sa (GlobalSign GCC R3 DV TLS CA 2020), provides a veneer of legitimacy but does not mitigate the underlying threat. The domain has since been taken offline, though historical activity or re-registration remains a risk. Users who visited yourwallet.solar or interacted with any associated links should take immediate action to secure their assets. First, disconnect any connected wallets from the site and revoke all permissions granted to unknown or suspicious smart contracts using a blockchain explorer or wallet management tool. Next, transfer remaining funds to a new, secure wallet address not previously exposed to the phishing domain. Monitor transaction history for any unauthorized activity and report the incident to relevant cryptocurrency abuse platforms or security communities. If credentials or private keys were entered on the site, consider those compromised and avoid reusing them. Finally, enable multi-factor authentication and phishing-resistant security measures for all cryptocurrency-related accounts to prevent future exploitation.