# xiaoxiaosol.xyz — SUSPICIOUS

> PhishDestroy identifies xiaoxiaosol.xyz as a crypto drainer. With 3/95 VirusTotal detections, avoid connecting your wallet. Report any exposure!

## Summary
PhishDestroy has flagged xiaoxiaosol.xyz as a dangerous crypto drainer. This website likely attempts to trick users into connecting their cryptocurrency wallets and signing transactions that would drain their assets. Exercise extreme caution and avoid interacting with this site.  

Indicators of malicious activity include a concerning 3/95 score on VirusTotal, suggesting that multiple security vendors recognize the domain as a threat. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and was created relatively recently on December 04, 2025. Furthermore, xiaoxiaosol.xyz appears on 2 security blocklists, and is actively blocked by MetaMask and SEAL, providing further evidence of its malicious nature. It resolves to IP address 104.21.2.230.  

If you have visited xiaoxiaosol.xyz and connected your cryptocurrency wallet, immediately revoke any permissions granted to the site. Transfer your assets to a new, secure wallet as soon as possible. Monitor your accounts for any unauthorized transactions. Report the website to your cryptocurrency wallet provider and to any relevant security organizations to help protect other users. It is crucial to remain vigilant and prioritize your digital asset security.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-04 08:44:50
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 104.21.2.230

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["MetaMask", "SEAL"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ff819d36-353f-4ab6-9784-67851305beb3
- PhishDestroy: https://phishdestroy.io/domain/xiaoxiaosol.xyz/
- LLM endpoint: https://phishdestroy.io/domain/xiaoxiaosol.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xiaoxiaosol.xyz/
Last updated: 2026-04-01