# refundsolana.fun — MALICIOUS — Crypto Drainer (Solana Drainer)

> Stay safe from crypto theft. refundsolana.fun is a low-risk Solana drainer domain. Avoid interacting and secure your wallet immediately.

## Summary
PhishDestroy identifies refundsolana.fun as an active crypto drainer targeting Solana token holders. It attempts to trick users with promises to recover lost SOL tokens.

The domain was registered on March 8, 2026, via NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 45.148.103.220. It employs a known Solana drainer kit. VirusTotal flags 2 out of 95 security engines, indicating low but credible risk.

Currently active, users are advised to refrain from visiting refundsolana.fun and to safeguard their wallets by using trusted recovery methods. Monitoring and blocking this domain is recommended to prevent compromise.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: alive (HTTP 200)
- Drainer type: Solana Drainer
- Target brand: Solana
- Page title: Get Your SOL Back Instantly | Recover Rent from Solana Token Accounts

## Domain Intelligence
- Registered: 2026-03-08 00:00:00
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 45.148.103.220
- Nameservers: joaquin.ns.cloudflare.com mina.ns.cloudflare.com

## Detection Status
- VirusTotal: 8 vendors flagged
  Vendors: ["CyRadar", "Ermes", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "SOCRadar", "alphaMountain.ai"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd15a-ba75-7278-8012-7db68efeabf9.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/c29caeac-d794-41a3-aed2-fedc6d30acb6
- PhishDestroy: https://phishdestroy.io/domain/refundsolana.fun/

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/refundsolana.fun/
Last updated: 2026-03-14