testsoludapp[.]pages[.]dev

PhishDestroy identifies testsoludapp.pages.dev as an active crypto drainer campaign targeting Solana users. This domain leverages Cloudflare Pages to host a fraudulent Solana dApp interface designed to trick victims into connecting their wallets and signing malicious transactions that drain crypto assets. Technical analysis confirms the domain resolves to IP 172.66.47.149 and operates under a Let's Encrypt SSL certificate, providing a false sense of legitimacy. The site currently remains undetected by 95 security vendors on VirusTotal, highlighting the need for proactive defense and early warning systems. This domain was flagged through Cloudflare Pages with registration details obscured, though the hosting infrastructure and SSL issuance point to a deliberate attempt to evade detection. With 0 detections on VirusTotal as of the latest scan, the threat remains under investigation but is actively distributing malicious payloads. The infrastructure alignment with known drainer campaigns—particularly the use of Cloudflare’s free Pages service and Let’s Encrypt certificates—indicates a pattern used by threat actors to rapidly deploy and rotate attack domains while maintaining plausible deniability. The seed identifier 10f446 supports correlation with a broader cluster of Solana-targeting fraudulent dApps observed in recent weeks. Users who visited testsoludapp.pages.dev should immediately disconnect their wallet, revoke any unauthorized permissions, and scan their device for malware. Do not interact with this domain or any links associated with it. Report the site to PhishDestroy’s threat intelligence platform and share any wallet transaction hashes or connected dApp interactions for forensic review. If you connected your wallet, check transaction history for unauthorized transfers and consider transferring remaining assets to a cold wallet. Monitor your accounts for suspicious activity and enable multi-factor authentication where possible. This advisory will be updated as new intelligence emerges.