# airdrop-solaxy.org — SUSPICIOUS

> Warning: airdrop-solaxy.org is linked to crypto draining scams. Avoid interacting with this domain as it poses a medium risk and is currently offline.

## Summary
PhishDestroy identifies airdrop-solaxy.org as a domain associated with crypto drainer activities, designed to illicitly extract cryptocurrency assets from users. This site was flagged due to suspicious behavior consistent with common crypto scam tactics, raising a medium-level risk concern for potential victims.

The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited and resolved to IP address 172.67.223.196. Despite being listed on one security blocklist and flagged by 3 out of 95 security vendors on VirusTotal, the domain appeared under the page title "Just a moment...", hinting at possible use of redirection or script-based user interaction typical of scam frameworks.

Currently, airdrop-solaxy.org is offline and no longer active, reducing immediate threat exposure. However, users should remain cautious and avoid any engagement with this domain or related URLs. It is recommended to use updated security solutions and verify legitimacy before interacting with any crypto-related airdrop offers to prevent falling victim to similar threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Scam type: Airdrop Scam
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.223.196
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["ignacio.ns.cloudflare.com", "liberty.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["CRDF", "Gridinsoft", "Seclookup"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b954f-d735-7443-92c2-534d24998f03.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/cd4bf645-1478-4b99-9012-a1f7cb59440d
- PhishDestroy: https://phishdestroy.io/domain/airdrop-solaxy.org/
- LLM endpoint: https://phishdestroy.io/domain/airdrop-solaxy.org/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdrop-solaxy.org/
Last updated: 2026-03-19