ansem[.]solcoins[.]icu

Analysis as of July 21, 2026 indicates that the domain ansem.solcoins.icu is currently active and associated with a high‑risk generic phishing campaign. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on July 04, 2026 and resolves to the IPv4 address 158.94.208.165. Its authoritative name servers are patrick.ns.cloudflare.com and suzanne.ns.cloudflare.com, both operated by Cloudflare. The domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy service, confirming external confirmation of malicious intent. VirusTotal scans show that 2 out of 91 security vendors have flagged the domain, reinforcing the suspicion despite a relatively low detection count. No additional context such as page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts is presently available, limiting the depth of technical fingerprinting. Given the limited but consistent evidence—recent registration, Cloudflare hosting, blocklist inclusion, vendor detections, and active status—defenders should treat ansem.solcoins.icu as a malicious host. Recommended mitigation steps include adding the domain to network deny lists, configuring DNS filtering to block resolution, monitoring outbound connections to the associated IP address, and reviewing logs for any attempted interactions originating from internal hosts. Continuous re‑evaluation is advised as further intelligence, such as content analysis or additional vendor detections, becomes available.