# solanatph.world — MALICIOUS — Crypto Drainer (Solana Drainer)

> solanatph.world is linked to a crypto drainer threat using Solana Drainer kit. Stay alert and avoid interactions with this suspicious domain.

## Summary
PhishDestroy identifies solanatph.world as an active domain associated with a crypto drainer threat, currently classified under an under investigation risk level. This domain is suspected of targeting Solana cryptocurrency users through malicious draining techniques, posing a potential financial risk to victims.

The domain solanatph.world was registered recently on March 18, 2026, via PDR Ltd. d/b/a PublicDomainRegistry.com, and resolves to the IP address 188.114.96.3. Although VirusTotal scans show zero detections across 95 security vendors, the domain’s connection to the Solana Drainer kit and its recent creation date raise suspicion. These factors, combined with its use in active campaigns, support the ongoing investigation into its malicious intent.

Users and organizations are advised to exercise caution by avoiding any engagement with solanatph.world, especially in the context of cryptocurrency transactions or wallet interactions. Monitoring network traffic for connections to the domain and employing updated threat intelligence feeds can help mitigate exposure. PhishDestroy continues to track the domain’s activity and will update its status as more information becomes available.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: alive (HTTP 403)
- Drainer type: Solana Drainer
- Target brand: Solana

## Domain Intelligence
- Registered: 2026-03-18 11:49:02
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 188.114.96.3
- Nameservers: june.ns.cloudflare.com nikon.ns.cloudflare.com

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/NdnHHFhM/380a15bef74a.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/ea043340-938d-42d1-b4b2-c7430031e8ee
- PhishDestroy: https://phishdestroy.io/domain/solanatph.world/
- LLM endpoint: https://phishdestroy.io/domain/solanatph.world/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/solanatph.world/
Last updated: 2026-03-19