sol-drop[.]bet

This domain, sol-drop.bet, is flagged as a confirmed phishing site targeting the Solana cryptocurrency ecosystem. Analysis indicates it operates under the brand impersonation threat category, specifically designed to execute token drain attacks against Solana wallet users. The site presents itself as a legitimate airdrop or token distribution platform, a common tactic to deceive users into connecting wallets and authorizing malicious transactions. Technical indicators confirm the domain's malicious nature. It is detected by 2 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain resolves to the IP address 188.114.97.3 and is registered through Cloudflare, Inc. It appears on one security blocklist and was actively blocked by at least one threat intelligence feed. The page title 'Nur einen Moment...' suggests the use of a German-language placeholder or intermediate loading page, often associated with phishing kits designed to evade detection. As of the latest verification, sol-drop.bet has been taken offline, reducing immediate exposure to users. However, the infrastructure remains a residual risk, as domains registered through bulletproof registrars or privacy services can reappear under different names. Users who interacted with the site should revoke any connected wallet permissions and monitor accounts for unauthorized transactions. Security teams are advised to maintain blocklist entries for this domain and its associated IP to prevent potential re-emergence.