jtdxvp[.]icu

This domain, jtdxvp.icu, is identified as a high-risk crypto drainer operation impersonating the Solana blockchain platform. The page title "SOLANA SPIN" suggests a fraudulent token or airdrop scheme designed to trick users into connecting wallets, likely executing unauthorized transactions to drain funds. Analysis indicates the domain targets cryptocurrency users through brand impersonation, a common tactic in crypto-related phishing campaigns. Infrastructure analysis reveals the domain was registered on May 20, 2025, through WEBCC, a registrar frequently associated with malicious domains. It resolves to the IP address 188.114.96.3, hosted by a content delivery network provider in Canada. VirusTotal detections show 10 out of 95 security vendors flagging the domain as malicious, while it appears on three security blocklists. The domain lacks an SSL certificate, a red flag for user security. No entries were found in Google Safe Browsing at the time of analysis. The domain is currently offline, mitigating immediate user risk. However, the infrastructure remains registered, and similar domains may reappear under different names. Response actions by security providers, including PhishDestroy, MetaMask, and SEAL, have effectively blocked access. Remaining risks include potential reuse of the IP or registrar for future malicious campaigns. Users are advised to verify domain authenticity before interacting with any Solana-related promotions and to monitor wallet connections for unauthorized access.