The recent advisory from Web3 security collective Scam Sniffer highlights escalating **phishing threats** within the Solana ecosystem. On December 9th, the team reported that a significant number of attacks leverages third-party domains to evade detection by wallet security systems. The practice involves the use of expired DAPP domains that exploit existing XSS vulnerabilities, posing a substantial risk to unsuspecting users. Security experts strongly recommend that when encountering DAPPs triggering secondary windows or redirection, users must conduct a thorough verification of the security protocols in place. This precaution is essential to safeguard digital assets amid the growing sophistication of crypto scams. Maintaining vigilance and adopting layered security practices can mitigate risks associated with wallet phishing, ensuring a safer user experience as the **Web3 landscape** continues to evolve.