# solanexai-claim.pages.dev — SUSPICIOUS

> WARNING: solanexai-claim.pages.dev is a verified crypto drainer impersonating Solana projects. 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies solanexai-claim.pages.dev as an active crypto drainer posing as a Solana-based airdrop or claim site. This domain is currently under investigation but remains operational, tricking users into connecting wallets under false pretenses. The threat involves silent token or NFT theft via malicious transaction signatures, where victims authorize transfers without realizing the withdrawal until after confirmation. Users who interact with this domain risk immediate loss of funds stored in connected wallets.  This domain resolves to IP address 188.114.96.3 and is hosted on Cloudflare infrastructure, registered through Cloudflare, Inc. As of the latest scan, the domain shows 0 detections out of 95 engines on VirusTotal, indicating it has not yet been widely blacklisted. The SSL certificate is issued by Google Trust Services, which may lend an air of legitimacy to unsuspecting users. The domain is hosted on pages.dev, a legitimate Cloudflare Pages subdomain, which is commonly abused to host spoofed claim or verification portals targeting crypto communities.  Users who have visited or interacted with solanexai-claim.pages.dev should immediately disconnect their wallets and revoke any unauthorized permissions. Do not approve transactions or sign messages from unknown domains, especially those claiming to offer rewards, airdrops, or token claims. Use PhishDestroy to scan suspicious domains in real time before taking any action. If you have connected your wallet, monitor it closely for unauthorized transactions and consider transferring remaining funds to a new, secure wallet. Report this domain through PhishDestroy to help protect the broader community.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/5a1b2e69-67a5-40b0-9389-434edd3cc790
- PhishDestroy: https://phishdestroy.io/domain/solanexai-claim.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/solanexai-claim.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/solanexai-claim.pages.dev/
Last updated: 2026-03-22