sol-cleaner[.]click

PhishDestroy identifies sol-cleaner.click as an active crypto drainer phishing domain currently under investigation with a high risk level. This domain mimics legitimate Solana cleaning services to trick users into connecting wallets and signing malicious transactions that drain cryptocurrency assets. The infrastructure is designed to exploit trust in Solana ecosystem tools, making it particularly dangerous for cryptocurrency users who may unknowingly authorize token approvals or transfers.

This domain was flagged with 0 detections out of 95 VirusTotal engines, registered through WEBCC on December 02, 2025, and resolves to IP 188.114.97.3. It appears on 3 security blocklists including MetaMask, SEAL, and Maltrail security feeds. Despite using a Google Trust Services SSL certificate, the domain's recent creation date and complete lack of detection on VirusTotal suggest this is a newly deployed threat infrastructure that evades traditional signature-based detection systems.

To mitigate risks from crypto drainer domains like sol-cleaner.click, users should immediately revoke any token approvals to this domain through blockchain explorers like Etherscan or Solscan. Never connect wallets to unknown cleaning services or transaction processors. Verify URLs through official project channels before interacting with any Solana tools. Consider using hardware wallets for large asset storage and enable transaction simulation features offered by wallet providers. Report suspicious domains to security teams and maintain updated blocklists in wallet software to prevent future exposure.