getsolspin[.]xyz

This domain is flagged as a high-risk crypto drainer leveraging brand impersonation of Solana to deceive users into connecting wallets and authorizing malicious transactions. Analysis indicates the site employs a fraudulent "SOLANA SPIN" interface, designed to mimic legitimate Solana-based applications while draining cryptocurrency assets from victim wallets upon interaction. Infrastructure analysis reveals the domain was registered on May 23, 2024, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 188.114.96.3 and is detected by 13 out of 95 security vendors on VirusTotal. The domain appears on three security blocklists and is actively blocked by wallet security providers and phishing detection systems. Additional technical indicators include the use of Node.js, Vue.js, Nuxt.js, and Cloudflare, alongside a Gridinsoft trust score of 0/100, confirming its malicious classification. Mitigation requires immediate caution for users who may have interacted with the domain. Victims should revoke any suspicious wallet authorizations, transfer remaining assets to a secure wallet, and monitor transaction histories for unauthorized activity. Wallet providers and security platforms are advised to update blocklists to include this domain and its associated IP. Users are urged to verify domain authenticity before connecting wallets to any Solana-related applications, particularly those promoting giveaways or interactive spin interfaces.