# solsgrand.com — MALICIOUS > solsgrand.com is a crypto drainer impersonating a login portal. Flagged by 14 VirusTotal scanners since March 2026. ## Summary PhishDestroy identifies solsgrand.com as an active fake login page designed to steal cryptocurrency credentials. Victims risk drained wallets after entering account details. This domain was flagged by 14 security vendors on VirusTotal and is already blocked by MetaMask, indicating clear malicious intent. This domain was registered on March 06, 2026 through Hello Internet Corp and resolves to IP 104.21.86.203. It uses a legitimate Let's Encrypt SSL certificate to appear trustworthy, but only 1 security blocklist currently captures its activity. The short domain age combined with cryptocurrency targeting suggests opportunistic credential harvesting. If you visited this site, immediately disconnect from the internet and revoke any connected wallet permissions. Scan your device with updated antivirus software and consider transferring remaining crypto assets to a new wallet. Change passwords only after confirming your system is malware-free. Report the domain to your security team or PhishDestroy to help protect others. ## Threat Details - Verdict: MALICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2026-03-06 11:05:39 - Registrar: Hello Internet Corp - IP: 104.21.86.203 ## Detection Status - VirusTotal: 14 vendors flagged - Google Safe Browsing: clean - Blocklists: 1 hits Lists: ["MetaMask"] ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/57b9ceb5-35dc-4253-8157-19d675b54c44 - PhishDestroy: https://phishdestroy.io/domain/solsgrand.com/ - LLM endpoint: https://phishdestroy.io/domain/solsgrand.com/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/solsgrand.com/ Last updated: 2026-03-23