# solanamax-airdrop.pages.dev — MALICIOUS — Crypto Drainer (Solana Drainer)

> Domain solanamax-airdrop.pages.dev is a live Solana drainer scam with 0/95 VirusTotal detections. Avoid any airdrop prompts from this site; it steals crypto.

## Summary
PhishDestroy identifies solanamax-airdrop.pages.dev as an active Solana drainer kit deployed under Cloudflare's Pages.dev service. The domain masquerades as a legitimate Solana airdrop portal but is engineered to siphon cryptocurrency from victims who connect their wallets. Detection remains shockingly low at 0 detections out of 95 engines on VirusTotal, indicating this campaign is flying under the radar while actively stealing funds.  This domain was registered through Cloudflare, Inc. and resolves to IP 172.66.47.25. It uses a Google Trust Services SSL certificate to appear authentic, yet operates as a Solana drainer kit targeting users expecting an airdrop reward. The unique seed ec7144 confirms this is a tracked, persistent threat actor infrastructure.  If you visited solanamax-airdrop.pages.dev, disconnect your wallet immediately using a clean device. Revoke any permissions granted via your wallet’s connection manager and transfer remaining assets to a new wallet. Report the domain to your wallet provider and monitor for unauthorized transactions. Do not interact with any prompts or links from this domain or similar airdrop scams.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: unknown (HTTP ?)
- Drainer type: Solana Drainer
- Target brand: Airdrop Scam

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.25

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6a051f48-704d-4120-88f9-7b1969ca3880
- PhishDestroy: https://phishdestroy.io/domain/solanamax-airdrop.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/solanamax-airdrop.pages.dev/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/solanamax-airdrop.pages.dev/
Last updated: 2026-03-22