# solana-token-creator-4f1.pages.dev — MALICIOUS — Crypto Drainer (Solana Drainer)

> solana-token-creator-4f1.pages.dev is a Solana crypto drainer impersonating OKX, with 0/95 VirusTotal detections. Avoid all interaction.

## Summary
PhishDestroy identifies solana-token-creator-4f1.pages.dev as a high-risk Solana crypto drainer actively impersonating the OKX brand. This malicious domain (seed 19a583) is designed to deceive users into connecting crypto wallets under the false pretense of token creation services, then silently draining assets through smart contract interactions. The site operates with a valid SSL certificate issued by Google Trust Services, adding false legitimacy, while resolving to IP 188.114.97.3 via Cloudflare infrastructure. Threat intelligence confirms this is part of a growing trend of Solana-focused drainer kits targeting unsuspecting cryptocurrency users.  This domain was flagged with seed 19a583 and shows zero detections on VirusTotal across 95 security engines as of current scans, indicating it evades traditional antivirus detection. Registered through Cloudflare, Inc., the site leverages the popular CDN to obscure its true hosting location while maintaining uptime. The drainer kit used is identified as a Solana Drainer variant, specifically engineered to exploit wallet connection permissions and execute unauthorized token transfers. Impersonation of OKX—a major cryptocurrency exchange—suggests the attackers aim to exploit user trust in established platforms.  If you visited solana-token-creator-4f1.pages.dev, immediately disconnect your wallet from any dApps or websites. Revoke any suspicious permissions through your wallet’s connection manager or use tools like WalletConnect’s permission revoker. Do not interact with any prompts or smart contract approvals that appear on this site. Report the domain to OKX via their official phishing channels and consider scanning your device with reputable antivirus software. Share this warning with others in the Solana community to prevent further victimization.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: unknown (HTTP ?)
- Drainer type: Solana Drainer
- Target brand: OKX

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b29b75e4-1bef-4321-87fa-1e63488c33c3
- PhishDestroy: https://phishdestroy.io/domain/solana-token-creator-4f1.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/solana-token-creator-4f1.pages.dev/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/solana-token-creator-4f1.pages.dev/
Last updated: 2026-03-24