# drift-protocol.org — SUSPICIOUS

> drift-protocol.org mimics Solana's brand but shows low risk. Stay cautious and verify before interacting with this domain.

## Summary
PhishDestroy identifies drift-protocol.org as an active brand impersonation threat targeting Solana users. The domain attempts to deceive users by presenting itself as a legitimate decentralized trading platform on Solana, which could lead to phishing or fraud attempts. Despite a low risk level, users should remain vigilant given the potential for credential theft or financial loss.

The domain was registered on March 11, 2026, through Dynadot LLC and currently resolves to IP address 188.114.96.3. It is flagged on three security blocklists and detected by 2 out of 95 VirusTotal security vendors, indicating some suspicion but not widespread consensus on maliciousness. The site’s page title, "Drift Protocol | Decentralized Trading on Solana," further supports its intent to impersonate Solana-based services.

Users are advised to exercise caution when encountering drift-protocol.org or similar domains. Before submitting any personal information, verify the official Solana website and avoid clicking on unsolicited links. Employ updated security tools and consult trusted sources to confirm legitimacy. Reporting suspicious domains to security platforms can help protect the broader community.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Target brand: Solana
- Page title: Drift Protocol | Decentralized Trading on Solana

## Domain Intelligence
- Registered: 2026-03-11 15:07:01
- Registrar: Dynadot LLC
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: adele.ns.cloudflare.com fattouche.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce210-fd36-764f-bef9-bcbccacd1d00.png
- PhishDestroy: https://phishdestroy.io/domain/drift-protocol.org/
- LLM endpoint: https://phishdestroy.io/domain/drift-protocol.org/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/drift-protocol.org/
Last updated: 2026-03-19