vote-ika[.]xyz

This domain, vote-ika.xyz, is identified as a confirmed brand impersonation scam targeting Solana ecosystem users. Analysis of the site reveals a fraudulent interface masquerading as 'Bridgeless Capital Markets on Solana | Ika,' designed to deceive visitors into interacting with malicious smart contracts or disclosing sensitive wallet credentials. No explicit crypto drainer kit signatures were detected in initial scans, though the site's structure aligns with common wallet-draining attack patterns observed in similar Solana impersonation schemes. Infrastructure analysis reveals multiple high-confidence technical indicators. The domain was registered on May 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with fraudulent domains. It resolves to IP address 104.21.64.131, a Cloudflare-protected endpoint leveraging HTTP/3 and Cloudflare Browser Insights. Security vendor assessments show 5/95 detections on VirusTotal, while Gridinsoft assigns a trust score of 0/100. The domain appears on four independent security blocklists and is actively blocked by MetaMask, PhishDestroy, SEAL, and ScamSniffer. As of the latest verification, vote-ika.xyz has been taken offline, though residual risk persists due to the domain's registration remaining active. The creation date discrepancy (2026) suggests potential typosquatting or preemptive registration tactics. Users who interacted with the site prior to takedown are advised to revoke any connected smart contract approvals, monitor wallet activity for unauthorized transactions, and verify all connected dApps. Organizations should update internal blocklists to include this domain and its associated IP, while monitoring for re-emergence under similar naming conventions.