# reward-solananpczx.pages.dev — MALICIOUS — Crypto Drainer (Solana Drainer)

> Beware: reward-solananpczx.pages.dev is a live Solana drainer site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies reward-solananpczx.pages.dev as a high-risk Solana crypto drainer actively stealing digital assets from unsuspecting users. This malicious domain impersonates legitimate Solana projects to trick victims into connecting their wallets, then silently siphons tokens through sophisticated smart contract interactions. The page is part of a growing trend where attackers leverage Cloudflare-hosted phishing pages to bypass traditional security controls while maintaining near-perfect operational security.  This domain was flagged with seed 2b9509 after analysis revealed it operates with a Google Trust Services SSL certificate, has evaded detection with 0 detections across 95 VirusTotal scanners, and resolves to IP 172.66.47.186. Registered through Cloudflare, Inc., the infrastructure shows all hallmarks of a professional drainer operation, specifically using the Solana Drainer kit—a toolkit notorious for automating theft from vulnerable wallets. The combination of Cloudflare's protection, Google's SSL, and zero detections suggests this threat is both sophisticated and currently under the radar of most security vendors.  If you've visited this site or entered any wallet credentials, immediately disconnect your wallet from the internet, revoke any suspicious token approvals through your wallet's settings, and transfer remaining assets to a new wallet. Use blockchain explorers to verify all recent transactions, and consider reporting the incident to your wallet provider and relevant blockchain authorities. Never approve unknown transactions or connect your wallet to unfamiliar sites, even if they appear legitimate at first glance.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: unknown (HTTP ?)
- Drainer type: Solana Drainer

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.186

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8bc5a49b-0d64-497c-b596-eb0494e723c6
- PhishDestroy: https://phishdestroy.io/domain/reward-solananpczx.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/reward-solananpczx.pages.dev/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/reward-solananpczx.pages.dev/
Last updated: 2026-03-28