# airdrop-solaxy.fi — SUSPICIOUS

> airdropsolaxy.fi hosts a low-risk crypto drainer scam. Avoid interacting and never share your wallet keys. Stay safe by steering clear of this domain.

## Summary
PhishDestroy identifies airdrop-solaxy.fi as a low-risk crypto drainer domain that was recently taken offline. This site posed a threat by attempting to steal cryptocurrency assets from users who engaged with its fake token claim offer. Despite the low risk level, users should remain cautious as such scams can lead to financial loss.

This phishing scheme worked by presenting a fake Solaxy Token ($SOLX) claim, tricking users into connecting their crypto wallets and approving malicious transactions. By doing so, attackers could drain funds directly from victims’ wallets without their consent. The domain was flagged by multiple security blocklists and a small number of antivirus vendors, reinforcing the suspicion of fraudulent activity.

If you visited airdrop-solaxy.fi, it is important to immediately revoke any wallet permissions granted to the site and monitor your crypto accounts for unauthorized transactions. Avoid interacting with unknown airdrop or token claim sites in the future, and use trusted security tools to verify domain safety. Staying vigilant helps prevent falling victim to crypto drainers like this one.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Scam type: Airdrop Scam
- Page title: Solaxy Token: $SOLX Claim is Live

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 172.67.200.225
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["kia.ns.cloudflare.com", "louis.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["G-Data", "Gridinsoft"]
- Google Safe Browsing: clean
- Blocklists: 7 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "Polkadot", "SEAL", "Enkrypt", "Codeesura"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a2f8c-983e-750f-86e0-de8b7cc7ac44.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/1b09779f-abb7-4cae-9c31-76bbd942c5db
- PhishDestroy: https://phishdestroy.io/domain/airdrop-solaxy.fi/
- LLM endpoint: https://phishdestroy.io/domain/airdrop-solaxy.fi/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdrop-solaxy.fi/
Last updated: 2026-03-19