İzlenen etki alanlarını arayın ve kaydedilmiş kanıtları, tespitleri ve en son gözlemlenen erişilebilirlik durumunu inceleyin.

195,446

Toplam Takip Edilen

VT Algılandı

88,473

En Son Görüldü: Aktif

108,701

Son kontrolde erişilemiyordu

VT Beklemede

KRİTİK THREAT

Understanding and Combating Solana Drainer Threats

PhishDestroy currently associates 2,671 tracked domain reports with Solana Drainer. Review stored detections, evidence, and the latest observed availability below.

2,671

Alan adları Detected

KRİTİK

Threat Level

How This Attack Works

Solana Drainer threats exploit vulnerabilities in Solana's crypto ecosystem to steal funds. Understanding their operation is crucial for prevention.

STEP 1

Target Identification

Attackers identify potential victims through phishing emails and fake websites.

STEP 2

Phishing Execution

Victims are lured to malicious sites mimicking legitimate platforms, like phantomairdrop.com.

STEP 3

Credential Harvesting

Once on the fake site, victims input sensitive information, believing it to be secure.

STEP 4

Fund Drainage

Attackers utilize harvested credentials to access wallets and drain funds via illicit transactions.

Technical Analysis

Solana Drainer attacks leverage phishing techniques to exploit the Solana blockchain. Attackers often create copycat websites using top TLDs such as .com, .xyz, and .cc, with domains hosted by registrars like Cloudflare, Inc. and PDR Ltd. These sites employ deceptive JavaScript and HTML code to mimic legitimate interfaces, tricking users into entering their private keys or seed phrases. Once credentials are obtained, attackers interact with the Solana blockchain via RPC calls to execute unauthorized transactions. The usage of smart contract functions like `transfer` and `approve` allows attackers to swiftly move funds out of victims' accounts. The infrastructure often involves a network of proxy servers to obfuscate the origin of the attack and make tracing back to the perpetrators difficult.

Real Cases

Phantom Wallet Breach (2023)

$2 million stolen

Attackers created a fraudulent Phantom wallet site to harvest user credentials, resulting in a $2 million theft.

SolUnion Scam (2024)

$1.5 million stolen

Using the domain phantom.solunion.cc, scammers executed a sophisticated phishing attack, stealing $1.5 million in SOL.

VaultBenefits Exploit (2024)

$3 million stolen

A fake airdrop campaign via vaultbenefits.net led to credential compromise and a subsequent $3 million drain.

How to Detect

Unsolicited emails or messages offering free SOL or airdrops

Websites with slight misspellings of legitimate names

Requests for private keys or seed phrases

Suspicious URL structures or unfamiliar TLDs like .xyz or .cc

Lack of HTTPS security on sites claiming to be secure

How to Protect Yourself

1 Verify URLs carefully before interacting

2 Enable multi-factor authentication on your wallet

3 Never share your private key or seed phrase

4 Regularly check transaction histories for unauthorized activity

5 Use official wallet apps and browser extensions

Frequently Asked Questions

What is Solana Drainer?

Solana Drainer refers to phishing attacks targeting Solana wallet users to steal funds by tricking them into revealing sensitive credentials.

How much money has been stolen through Solana Drainer?

Millions have been lost, with notable cases like the Phantom Wallet Breach resulting in a $2 million loss.

How do I protect myself from Solana Drainer?

Stay vigilant by verifying URLs, using multi-factor authentication, and never sharing your private keys.

What should I do if I'm a victim of Solana Drainer?

Rapor the incident to authorities and your wallet provider immediately, and attempt to trace unauthorized transactions.

Data sourced from PhishDestroy threat intelligence database — 2,671 domains tracked for this threat type

Solana Drainer — Threat Intelligence Smart Contract High Threat

solana.com (official)

2,671

Alan adları

901

Alive

1,475

Kaldırıldı

6.4

Avg VT

33.7%

Hayatta Kalma Oranı

96%

Detected

Since Mar 2024 1,349 VT değeri 5 veya daha büyük olan alanlar

Solana Drainer 2,671 domains

10 VTBilinmiyorSolana

weeddrop.fun

weedrop.fun

10 VTBilinmiyorrevolut

weedrop.fun

whalegurusol.fun

10 VTBilinmiyorrevolut

whalegurusol.fun

www.strategic-solana-reserve.com

10 VTEtkinSolana

www.strategic-solana-reserve.com

zrealdrop.top

10 VTBilinmiyoracross

zrealdrop.top

airclaim.presidentxi.live

9 VTBilinmiyorsolana

airclaim.presidentxi.live

auth-phantom-en.created.app

9 VTBilinmiyorPhantom

auth-phantom-en.created.app

aviraphantomvpnlogin.pages.dev

9 VTBilinmiyorPhantom

aviraphantomvpnlogin.pages.dev

backup.authorization-phantom.com

9 VTBilinmiyorphantom

backup.authorization-phantom.com

9 VTBilinmiyorJupiter

claim.switchboards.world

9 VTBilinmiyoracross

claim.switchboards.world

9 VTBilinmiyordexscreener

dexsmoji.fun

early-pudgypenguins.com

9 VTBilinmiyorsolana

early-pudgypenguins.com

event-safemoon.fun

9 VTBilinmiyortwitter

helps-phantom.pages.dev

9 VTBilinmiyorPhantom

helps-phantom.pages.dev

hylos.xyz

9 VTBilinmiyorcompound

9 VTBilinmiyorjupiter

jupuaryevent.live

lobstarwilde-solana.com

9 VTBilinmiyorSolana

lobstarwilde-solana.com

9 VTBilinmiyorJupiter

maindapp.top

mainsolchains.com

9 VTBilinmiyorJupiter

9 VTBilinmiyorrevolut

nietzscheanpenguin.top

9 VTBilinmiyorceler

nietzscheanpenguin.top

official-jupiter-solana.pages.dev

9 VTBilinmiyorJupiter

official-jupiter-solana.pages.dev

phantom--wallet-dec.pages.dev

9 VTBilinmiyorphantom

phantom--wallet-dec.pages.dev

phantom-site-2aa.pages.dev

9 VTEtkinPhantom

phantom-site-2aa.pages.dev

phantom-wallets.com.westnationalplc.ru

9 VTBilinmiyorPhantom

phantom-wallets.com.westnationalplc.ru

9 VTBilinmiyorPhantom

phantomwallets.blogspot.co.id

9 VTEtkinPhantom

phantomwallets.blogspot.co.id

phantomwalletx.blogspot.com.by

9 VTEtkinPhantom

phantomwalletx.blogspot.com.by

phantomws.xyz

9 VTBilinmiyorPhantom

9 VTBilinmiyordexscreener

raydium-solana-swap-ray.pages.dev

9 VTEtkincoinmarketcap

raydium-solana-swap-ray.pages.dev

raydium.io-i.pro

9 VTEtkinRaydium

raydium.io-i.pro

9 VTBilinmiyorrevolut

smartdappresolvers.live

9 VTBilinmiyor1inch

smartdappresolvers.live

smartresolverapp.pages.dev

9 VTBilinmiyor1inch

smartresolverapp.pages.dev

9 VTBilinmiyorJupiter

sol.solshelter.cc

solana-change.com

9 VTEtkinSolana

solana-incinerator.app

9 VTBilinmiyorSolana

solana-incinerator.app

solana-nft-creator.com

9 VTEtkinSolana

solana-nft-creator.com

solana-qr-code-generators.com

9 VTBilinmiyorSolana

solana-qr-code-generators.com

solanawallettracker.lovable.app

9 VTEtkinSolana

solanawallettracker.lovable.app

solbotsniper.fun

9 VTBilinmiyorbackpack

solflare-web.pages.dev

9 VTBilinmiyor

solflare-web.pages.dev

solflarewalletextension.com

9 VTEtkinSolflare

solflarewalletextension.com

spsn.allocation.finance

9 VTBilinmiyorrevolut

spsn.allocation.finance

9 VTBilinmiyorbackpack

usdt-solana-mixers.com

9 VTBilinmiyorSolana

usdt-solana-mixers.com

useless.allocation.finance

9 VTBilinmiyoracross

useless.allocation.finance

usephantom.me

9 VTBilinmiyorPhantom

9 VTBilinmiyorjupiter

wlt-phantom-us.pages.dev

9 VTBilinmiyorPhantom

wlt-phantom-us.pages.dev

9 VTBilinmiyorrevolut

8 VTBilinmiyorcoinbase

babypippinsol.com

8 VTBilinmiyorsolana

babypippinsol.com

« Önceki 5 6 7 8 9 10 11 Sonraki » Sayfa 8 ...'nin 27

Tehdit Müdahale Pipeline

Bu merkezde yer alan her bir alan adının nasıl doğrulandığı ve teyit edilmiş tehditlerin nasıl etkisiz hale getirildiği. Boru hattının tam görselleştirilmesi →

Tehdit İstihbaratı Kontroller— her alan adı taranır ve aşağıdakilerle karşılaştırılarak kontrol edilir: