solbot1[.]cc

Analysis of solbot1.cc shows a newly registered domain (creation date 21 May 2026) that is actively serving HTTP content (status 200) behind Cloudflare infrastructure (IP 104.21.87.204, CA location). The domain uses a Let's Encrypt certificate (E8) and is delegated to Cloudflare nameservers gigi.ns.cloudflare.com and matt.ns.cloudflare.com. Reputation data is poor: Gridinsoft assigns a trust score of 0/100, the domain appears on two security blocklists, and it has been flagged by the PhishDestroy and ScamSniffer blocklists. AlienVault OTX lists the domain in one threat pulse, and VirusTotal reports three detections out of 91 scanned vendors. Registration was performed through Gname.com Pte. Ltd., a registrar often associated with disposable or low‑cost registrations. The combination of a fresh registration, zero trust score, multiple blocklist listings, and positive detections on VirusTotal aligns with the high‑risk generic phishing classification. Uncertainty remains regarding the specific payload or victim targeting, as no page content or phishing kit details are available. Defenders should block or sinkhole the domain at the network perimeter, monitor DNS queries for the associated IP and nameservers, and include the domain in threat‑intel feeds. Continuous re‑scanning on VirusTotal or similar services is advised to capture any evolving indicators.