sols-launcher[.]cc

sols-launcher.cc has been confirmed as an active cryptocurrency wallet drainer site, designed to deceive users into connecting their Solana wallets under the guise of a launcher application. The domain mimics legitimate Solana ecosystem tools, aiming to trick users into authorizing malicious transactions that silently drain wallet funds. No specific drainer kit variant was identified in public sources, but the domain’s behavior aligns with known generic phishing tactics targeting cryptocurrency users. This domain was flagged by 3 out of 95 security vendors on VirusTotal and is registered through CNOBIN INFORMATION TECHNOLOGY LIMITED. It resolves to IP address 188.114.96.3 and was created on April 01, 2026. The domain holds a valid SSL certificate issued by Let's Encrypt, which may lend an air of legitimacy to unsuspecting users. No status in Google Safe Browsing (GSB) was reported, and current blocklist data indicates limited but growing detection coverage. The domain remains active and poses an elevated risk to users engaging with cryptocurrency tools. Immediate action includes blocking the domain at the network and DNS levels and updating browser and endpoint security policies to flag or block sols-launcher.cc. Users are strongly advised to verify the authenticity of wallet launchers and avoid downloading or connecting wallets to untrusted sites. While detection coverage is increasing, the risk persists due to the domain’s recent creation and lack of widespread blocking, requiring ongoing monitoring and proactive defense measures.