soldrainer[.]pages[.]dev

The domain soldrainer.pages.dev was a generic phishing site operating as a crypto drainer, designed to steal cryptocurrency by tricking users into connecting their wallets. No specific brand or drainer kit was identified in association with this domain. As of the latest verification, soldrainer.pages.dev has been taken offline, though its prior activity poses a risk to anyone who interacted with it.

Technical analysis of soldrainer.pages.dev shows 0 of 95 VirusTotal vendors flagged the domain, and Google Safe Browsing did not detect it as malicious. However, it appeared on 1 security blocklist (PhishDestroy). The domain was registered through Cloudflare, Inc. on May 12, 2025, and resolved to the IP address 104.21.64.1, hosted by Cloudflare in the US (AS13335). The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Worker threw exception | soldrainer.pages.dev | Cloudflare' with an HTTP 500 status. Technologies detected included HSTS, Cloudflare, and HTTP/3, with nameservers kenia.ns.cloudflare.com and apollo.ns.cloudflare.com.

Individuals who may have interacted with soldrainer.pages.dev should immediately revoke any token approvals granted to unknown or suspicious contracts and transfer remaining funds to a new, secure wallet. Monitor transaction histories for unauthorized activity and report the domain to platforms like PhishTank, Google Safe Browsing, or local cybersecurity authorities. If credentials were entered, change passwords and enable two-factor authentication on all affected accounts.