# waronusd1.isolana.org — MALICIOUS — Crypto Drainer (Solana Drainer)

> waronusd1.isolana.org impersonates Solana to drain crypto funds. Currently offline, stay vigilant and avoid interacting with suspicious token migration sites.

## Summary
PhishDestroy identifies waronusd1.isolana.org as a medium-risk crypto drainer targeting Solana users. The domain is classified as a fraudulent token migration site, attempting to lure victims with promises related to the $WAR token and false migration offers from Bonk to Pump.fun.

Technical indicators reveal the domain was registered on February 17, 2026, through NameCheap, Inc. It resolves to IP 63.176.8.218 and uses a Solana-specific drainer kit. Despite appearing on one security blocklist and having a low trust score of 0/100 from Gridinsoft, only 3 of 95 VirusTotal security vendors flagged it, indicating moderate detection coverage.

The domain has been taken offline, mitigating immediate risk. Users are advised to avoid any interaction with this or similar domains that impersonate Solana or other crypto brands. PhishDestroy recommends vigilance against suspicious token migration pages and urges verifying official project communications before engaging with crypto transactions.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: dead (HTTP 0)
- Drainer type: Solana Drainer
- Target brand: Solana
- Page title: $WAR Token Migration | From Bonk to Pump.fun

## Domain Intelligence
- Registered: 2026-02-17 04:42:04
- Registrar: NameCheap, Inc.
- Country: US
- IP: 63.176.8.218
- IP Country: DE
- IP City: Frankfurt am Main
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: dns1.registrar-servers.com dns2.registrar-servers.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Ermes", "SOCRadar", "URLQuery"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd2da-a328-7255-871b-0743b5b74ec3.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/63977087-b974-445b-9a92-e28695048f3e
- PhishDestroy: https://phishdestroy.io/domain/waronusd1.isolana.org/
- LLM endpoint: https://phishdestroy.io/domain/waronusd1.isolana.org/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/waronusd1.isolana.org/
Last updated: 2026-03-19