# solana-agent.com — MALICIOUS — Crypto Drainer (Solana Drainer)

> solana-agent.com operates as a Solana crypto drainer kit since Dec 2024, hosted on 188.114.97.3. Avoid interaction; drainers silently siphon tokens from.

## Summary
PhishDestroy identifies solana-agent.com as an active Solana crypto drainer kit deployed for credential and token theft. The domain was flagged on December 10, 2024, and remains unblocked despite hosting a live Solana Drainer kit. VirusTotal shows 0 out of 95 engines detecting the payload, indicating low detection coverage and high evasion potential.

Technical indicators confirm the domain resolves to IP 188.114.97.3 and is registered via Cloudflare, Inc. with an SSL certificate issued by Google Trust Services, leveraging trust signals to appear legitimate. The domain’s age and certificate issuance suggest opportunistic deployment, while the absence of blocklist entries and zero detections highlight a gap in current threat intelligence coverage. The drainer kit is specifically designed to target Solana wallet connections and initiate unauthorized token transfers.

Users must immediately block solana-agent.com at the firewall and DNS level. Never connect a Solana wallet to this domain or any linked pages. Review wallet transaction histories for unauthorized transfers and revoke any suspicious permissions via tools like Solana Explorer or Phantom’s connection manager. Report the domain to Solana security channels and update threat intelligence feeds to prevent further exploitation.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: unknown (HTTP ?)
- Drainer type: Solana Drainer

## Domain Intelligence
- Registered: 2024-12-10 19:12:32
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a3e38493-eaa2-468c-8f5d-53f1a1c26d3d
- PhishDestroy: https://phishdestroy.io/domain/solana-agent.com/
- LLM endpoint: https://phishdestroy.io/domain/solana-agent.com/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/solana-agent.com/
Last updated: 2026-03-29