sol-screener[.]xyz

The domain sol-screener.xyz has been identified as a generic phishing threat, specifically a crypto drainer designed to steal cryptocurrency wallet credentials and funds. Created on March 27, 2026, and now taken offline, this domain posed a high risk to users, particularly those in the cryptocurrency community. It impersonated a legitimate Solana token screening tool, tricking visitors into connecting their wallets and approving malicious transactions.

Evidence of its malicious nature is extensive. VirusTotal flagged it with 13 out of 95 security vendors classifying it as malicious, and it appeared on three separate security blocklists. AlienVault OTX included it in one threat intelligence pulse, confirming its presence in the threat landscape. The domain resolved to IP address 172.67.158.52 and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com. Notably, it had no SSL certificate, which is a red flag for any legitimate service. These technical indicators collectively confirm that sol-screener.xyz was a well-documented phishing operation.

Although the domain is currently offline, the threat it represents remains relevant as similar domains may still be active. Users should exercise extreme caution with any unsolicited cryptocurrency platforms and always verify URLs through PhishDestroy or other trusted security tools. Never connect your wallet or enter sensitive information on unverified sites. If you have already interacted with sol-screener.xyz, check your wallet permissions and consider migrating assets to a new wallet immediately.