solantrades[.]com

Analysis of solantrades.com indicates a confirmed credential phishing operation active as of July 12, 2026. The domain, registered on February 2, 2026, through Dynadot Inc, resolves to IP address 198.251.81.49, hosted by FranTech Solutions in the United States. Infrastructure analysis reveals nameservers ns103.my-control-panel.com and ns104.my-control-panel.com, and the site employs a Let's Encrypt SSL certificate (YE2). The page title, 'Bot Verification,' aligns with common phishing tactics designed to deceive users into submitting credentials under the guise of security checks. Technical indicators include detection by 10 of 91 security vendors on VirusTotal, though this does not represent exhaustive validation. The domain is blocked by PhishDestroy, MetaMask, and SEAL, and appears on three security blocklists. Google Safe Browsing flags it for social engineering, and AlienVault OTX lists it in one threat intelligence pulse. Detected technologies include YouTube, Bootstrap, LiteSpeed, Smartsupp, OWL Carousel, jQuery, GetButton, and DataTables, which may be leveraged for legitimate-appearing functionality or tracking. The scam type is explicitly classified as credential phishing, though the exact brand or service being impersonated remains unconfirmed due to lack of detailed page content analysis. Defenders should treat this domain as high-risk and prioritize blocking at the DNS or network level. Further investigation into associated IP addresses and nameservers may reveal additional linked infrastructure. No evidence suggests this domain is part of a broader campaign beyond the current credential harvesting activity.