Security Scan Report: solairdrops-8z.netlify.app

Redirected to:
https://solairdrops-8z.netlify.app/claim?contract=Ai66LHZG9MCzg1WKdaww...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 3 domains to perform 10 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://solairdrops-8z.netlify.app/claim?contract=Ai66LHZG9MCzg1WKdawwqduVAXpNDUuV8M3uyq5ppump&pid=oedhv

Effective URL:
https://solairdrops-8z.netlify.app/claim?contract=Ai66LHZG9MCzg1WKdaww...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed Solana wallet drainer: analyst-vetted kit plus CRITICAL hunting-rule hit on a netlify.app page posing as a CATE/Catecoin airdrop claim. Connecting a wallet and signing will drain funds.

Risk Factors (5)
Known Solana wallet-drainer kit confirmed by analyst-vetted roster and CRITICAL hunting-rule hit
Wallet-connection/claim flow designed to obtain signing approval and drain funds
Fabricated token airdrop with countdown pressure and fake leaderboard
Disposable hosting-platform subdomain impersonating a token airdrop claim portal
Unranked third-party script host dribble-distaste.asset-base.cc serving page code
Domain age information unavailable

Details

Page Title

Check Your CATE Airdrop

Scan Type

public

Domain Name Analysis

The domain name 'solairdrops-8z.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'solairdrops-8z'. The core label 'netlify' covers 7 characters holding 2 vowels versus five consonants. Tokenizing the label suggests 3 words: net, li, fy. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://solairdrops-8z.netlify.app/claim?contract=Ai66LHZG9MCzg1WKdawwqduVAXpNDUuV8M3uyq5ppump&pid=oedhv

Page Load Overview

1.04s
Total Load Time
42 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,718 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain63% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
63%
gambling betting
40%
government public service
30%
adult content
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1035.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
101--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F7C39FE0BDF0241FA601134E870868D5AB46E0876B7E4104B9DC233A6F97D5BEDA357E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:S4/x8YCDYz79ImI/B/yMlwEJdYbQ8F4+lsVWK1uu4Qw2TzQH2L0r82It4uSRhKur:MDXyMlwWdYbQEONzqyrYIlTPQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:129645:gSiGQkBECcQQQGo6N4gCYyFIAgFiBKhQ8E0SrUJhnjAAGTcJIEDEAWgmYKuksZycWKIlRrAyCAIBrAWAiAYAMcBEICjQBYYC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfffb99908001818
Perceptual Hash:89b694333d643573
Difference Hash:b66951735b793332
Wavelet Hash:dfffbdb909001818
Color Hash:#8e79d2

Other Hashes

Crop Resistant:b66951735b793332

Scan History

Scan history not available

Unable to load historical scan data