solfareapp[.]com

This domain, solfareapp.com, is flagged as an active crypto scam based on multiple technical indicators and security vendor detections. Registered on February 21, 2026, through Sav.com, LLC, the domain currently resolves to the IP address 34.76.205.124, hosted on Google Cloud infrastructure in the europe-west1 region (Belgium). The site returns an HTTP 200 status, indicating it is operational, though no SSL certificate is present, which is atypical for legitimate financial or crypto-related platforms. Infrastructure analysis reveals the use of Caddy as the web server technology, alongside Google Analytics and HTTP/3 support. The nameservers, ns1.all-harmless.domains and ns2.all-harmless.domains, have been associated with other low-reputation domains in prior reports, though their exact relationship to this campaign remains unverified. The domain appears on at least one security blocklist, and 14 out of 95 security vendors on VirusTotal have flagged it as malicious, aligning with the classification of a crypto scam. The page title, matching the domain name itself (solfareapp.com), provides no additional context about the targeted brand or specific scam mechanics. No phishing kit or known brand impersonation has been confirmed in the available data, leaving the exact content and user interaction flow unanalyzed. However, the absence of SSL and the use of a recently registered domain on cloud hosting infrastructure are consistent with patterns observed in fraudulent crypto schemes. Defenders should treat this domain as high-risk and consider blocking it at the network level, particularly in environments where crypto-related transactions or financial services are involved. The IP address 34.76.205.124 and associated nameservers may serve as additional indicators for monitoring or threat hunting. Given the domain's recent registration and active status, further monitoring is recommended to assess potential shifts in infrastructure or targeting behavior.