solgate[.]lionellauranceqil86[.]workers[.]dev

The domain solgate.lionellauranceqil86.workers.dev is currently active and identified as a crypto wallet drainer phishing site. Analysis of the page title, 'Sol Gateway v2 -- Latest Web3 Wallets,' suggests an attempt to impersonate legitimate Solana wallet services, targeting users seeking Web3 wallet solutions. This domain is designed to deceive victims into connecting their cryptocurrency wallets, enabling attackers to drain funds through malicious smart contract interactions or credential harvesting. Infrastructure analysis reveals the domain is registered through Cloudflare, Inc., and resolves to the IP address 104.21.2.240. It is flagged by 1 of 95 security vendors on VirusTotal, indicating limited but confirmed detection. The domain appears on three security blocklists and is actively blocked by at least three independent security providers. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the malicious intent of the domain. No creation date is publicly available, but the use of Cloudflare Workers suggests recent deployment, likely to evade traditional detection mechanisms. Current status confirms the domain remains active and operational. Users are strongly advised to avoid interaction with this domain, as it poses a high risk of financial loss. Network administrators should implement blocking rules for the domain and its associated IP address. Wallet providers and browser extensions should update their blocklists to include this domain. Victims who may have interacted with this site should immediately revoke any connected wallet permissions and transfer assets to a new, secure wallet. Continuous monitoring for similar domains using Cloudflare Workers infrastructure is recommended to mitigate further risks.