# solanaswap.run — MALICIOUS — Crypto Drainer (Solana Drainer)

> Discover the risks of solanaswap.run, a suspicious Solana-themed site linked to crypto draining. Stay informed and protect your assets today.

## Summary
PhishDestroy identifies solanaswap.run as an active domain exhibiting characteristics consistent with a crypto drainer targeting Solana users. Although it currently shows zero detections across 95 security vendors on VirusTotal, its recent creation date in March 2026 and registration through a generic registrar raise concerns. The domain is under investigation due to its impersonation of the Solana brand and association with a known Solana drainer kit.

This phishing operation works by mimicking the official Solana platform, tricking users into connecting their crypto wallets or entering sensitive credentials. Once interaction occurs, the drainer kit embedded in the site can siphon digital assets directly from victims' wallets without their consent. The website resolves to an IP address linked to suspicious activity, further supporting the likelihood of malicious intent.

If you have visited solanaswap.run, it is critical to immediately disconnect any connected wallets and monitor your accounts for unauthorized transactions. Users should avoid entering private keys or seed phrases on this domain and report any suspicious activity to their wallet providers. Employing trusted security tools and verifying domain legitimacy before interaction can mitigate risks associated with such phishing campaigns.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: dead (HTTP ?)
- Drainer type: Solana Drainer
- Target brand: Solana

## Domain Intelligence
- Registered: 2026-03-16 06:10:40
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.97.3
- Nameservers: june.ns.cloudflare.com nikon.ns.cloudflare.com

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/gMY2123f/cb6e252e9fa2.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e81b5312-b041-4400-aa2c-ab8fd2a532fa
- PhishDestroy: https://phishdestroy.io/domain/solanaswap.run/
- LLM endpoint: https://phishdestroy.io/domain/solanaswap.run/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/solanaswap.run/
Last updated: 2026-03-19