henry[.]solcheck-gb[.]lol

Analysis of the domain henry.solcheck-gb.lol shows that it was registered through Dynadot Inc on August 03, 2026 and is currently active. The authoritative nameservers nicole.ns.cloudflare.com and rex.ns.cloudflare.com place the domain behind Cloudflare’s edge network. DNS resolution returns the IPv4 address 172.67.165.90, an address owned by Cloudflare that is commonly used by threat actors to obscure the true hosting location. The domain appears on a single public phishing blocklist and is listed as blocked by the PhishDestroy feed, confirming that at least one security community has identified it as malicious.

VirusTotal reports that the domain has been scanned by 91 antivirus and URL‑reputation engines, with none of the engines flagging it at the time of the scan; this absence of detections does not constitute evidence of benign intent. The risk level is recorded as “under investigation” and the status remains active in monitoring platforms. No additional intelligence such as page title, SSL certificate details, or HTTP response codes has been published, leaving the content of the site unverified.

Given the recent creation date, the association with a known phishing blocklist, and the use of Cloudflare infrastructure, defenders should treat henry.solcheck-gb.lol as a high‑confidence phishing indicator. Recommended mitigations include adding the domain to DNS‑based blocklists, configuring web‑proxy filters to deny traffic, and monitoring for any future detections or changes in reputation scores. Continuous re‑evaluation is advised as additional analysis or vendor detections become available.