solbullishdegen[.]com

This domain, solbullishdegen.com, was registered on 22 December 2025 through NiceNIC International Group Co., Limited and is presently taken offline. Active scans show that four of ninety‑three VirusTotal scanners flagged the site, indicating the presence of malicious components. The domain resolves to IP address 172.67.191.39, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS records list the Cloudflare nameservers margot.ns.cloudflare.com and norman.ns.cloudflare.com, and no TLS certificate was presented when the site was reachable, resulting in an unsecured HTTP connection.

The page title returned by the server is the generic string “Just a moment…”, and the site has been classified as a crypto‑related phishing operation. Reputation data are uniformly negative: the domain appears on two independent blocklists (PhishDestroy and ScamSniffer) and received a Gridinsoft trust score of 1 / 100. These indicators collectively suggest a high likelihood that the domain was used to lure victims into fraudulent cryptocurrency schemes.

Because the site is no longer active, immediate mitigation is limited to updating perimeter defenses; organizations should add the domain and its associated IP address to deny‑list rules across web proxies, DNS filters, and endpoint protection solutions. Continuous monitoring of the IP range owned by Cloudflare for any re‑use of similar identifiers is advisable, as threat actors frequently recycle infrastructure. At present, no further technical details such as payload samples or command‑and‑control endpoints have been disclosed, leaving the full scope of the campaign uncertain.