# solunclaimed.xyz — SUSPICIOUS

> solunclaimed.xyz is a crypto drainer impersonating unclaimed Solana tokens. This active site poses a high theft risk, with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies solunclaimed.xyz as an active crypto drainer domain designed to steal cryptocurrency under the guise of claiming unclaimed Solana tokens. This fraudulent site mimics legitimate Solana airdrop or unclaimed token platforms to trick users into connecting their wallets, where malicious scripts drain funds via smart contract interactions. The threat is immediate and financially devastating, targeting users familiar with Solana’s ecosystem or those seeking unclaimed assets.  This domain was flagged with a creation date of March 23, 2026, and is currently resolving to IP 104.21.73.142. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and secured with a Let's Encrypt SSL certificate. Notably, only 0 out of 95 VirusTotal scanners detected any malicious activity at the time of assessment, indicating it is a newly emerged or stealthily operated threat. The low detection rate suggests it may not yet be widely known to security vendors, increasing the risk of successful exploitation by attackers.  Users who visited solunclaimed.xyz should immediately disconnect their wallets from any connected sites, revoke any recently approved smart contracts, and transfer remaining funds to a new wallet. Avoid interacting with this domain or any associated links, as the site is likely distributing malicious payloads. Report the domain to your antivirus provider and consider using browser-based tools to block the IP address (104.21.73.142) and domain name. If you entered your seed phrase or private keys, assume your wallet is compromised and move funds to a secure wallet immediately. Always verify URLs and use hardware wallets for high-value transactions to mitigate such risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-23 20:33:06
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.73.142

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/72a52c70-4acd-4d03-bba3-0eecdde1e053
- PhishDestroy: https://phishdestroy.io/domain/solunclaimed.xyz/
- LLM endpoint: https://phishdestroy.io/domain/solunclaimed.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/solunclaimed.xyz/
Last updated: 2026-03-24