solomonm[.]pages[.]dev

PhishDestroy identifies solomonm.pages.dev as a crypto drainer posing as a legitimate login portal to trick users into surrendering wallet credentials or authorizing malicious transactions. This domain is designed to mimic trusted services, aiming to silently drain cryptocurrency from victim wallets once login or wallet connection permissions are granted. The site is currently active and under investigation for active deployment in phishing campaigns targeting crypto users.

This domain was flagged with a generic phishing type and is under active investigation. It resolves to IP 172.66.44.73, registered through Cloudflare, Inc., and currently shows 4 out of 95 detections on VirusTotal, indicating it has not yet been widely recognized by antivirus engines. The domain uses a Google Trust Services SSL certificate to appear legitimate and has been active recently, with infrastructure tied to Cloudflare's Pages platform.

If you visited this site, immediately disconnect your wallet from any active sessions. Do not enter credentials or approve transactions. Scan your device with updated antivirus software and consider revoking any suspicious wallet approvals via blockchain explorers like Etherscan or Solscan. Report the domain to PhishDestroy for further analysis and warn others in your crypto communities to avoid interacting with this page.