solxol[.]com

This domain, solxol.com, poses a high-risk brand impersonation threat targeting users of the Jupiter platform. Analysis indicates the domain hosts a fraudulent airdrop page titled 'Jupiter | Airdrop,' designed to deceive visitors into disclosing sensitive credentials or transferring assets under false pretenses. The page mimics legitimate Jupiter branding, exploiting user trust in cryptocurrency airdrop promotions to facilitate unauthorized access to accounts or wallets. Infrastructure analysis reveals the domain was registered on October 21, 2025, through Dominet (HK) Limited and resolves to the IP address 57.129.97.29, hosted on AS16276 (OVH SAS) in Germany. Security vendor detections on VirusTotal show 14 out of 95 engines flagging the domain as malicious, while it appears on one security blocklist. The domain lacks an SSL certificate, further increasing exposure to interception or tampering. Google Safe Browsing has explicitly classified the site as phishing, and it is currently offline, though historical activity remains a concern. Users who visited solxol.com or interacted with its content should immediately revoke any connected wallet permissions and monitor their accounts for unauthorized transactions. If credentials were entered, reset passwords and enable multi-factor authentication on all related services. Report the incident to the legitimate platform’s security team for further investigation. Avoid re-engaging with the domain, even if it reappears under a different IP or registrar, as threat actors frequently reuse infrastructure for follow-up campaigns.