rjddz[.]my

This domain, rjddz.my, is identified as a brand impersonation threat targeting Solana, a cryptocurrency platform. Analysis confirms the domain was actively used for phishing operations designed to deceive users into disclosing sensitive credentials or transferring assets under false pretenses. The domain is currently offline, though prior activity warrants further scrutiny. Infrastructure analysis reveals the domain was registered on August 14, 2025, through Dynadot LLC and resolves to the IP address 23.225.199.93. It appears on one security blocklist and is flagged by 11 of 95 security vendors on VirusTotal, indicating moderate detection coverage. The domain holds a Gridinsoft trust score of 0/100, reflecting high-risk classification. Detected technologies include Bootstrap, Caddy, Swiper, Lodash, jQuery, and HSTS enforcement, suggesting a structured phishing framework. The SSL certificate was issued by Let's Encrypt, a common tactic to lend superficial legitimacy to malicious sites. The domain has since been taken offline, though residual risk remains for users who may have interacted with it during its active period. Organizations are advised to block the domain and its associated IP at the network perimeter and monitor for any residual connections. Security teams should review logs for interactions with rjddz.my or 23.225.199.93 and conduct user awareness training to highlight the risks of cryptocurrency-related phishing schemes. If credentials or wallet information were exposed, affected parties should rotate access keys and monitor for unauthorized transactions.