asociacionsolidaria[.]click

Analysis of the domain asociacionsolidaria.click indicates that it was registered on 17 December 2025 through Dynadot LLC and is currently offline. The authoritative nameservers are ns1.dyna-ns.net and ns2.dyna-ns.net, which resolve the domain to the IPv4 address 45.131.46.91. The host resides in Russia and is announced by AS212913, identified as FOP Hornostay Mykhaylo Ivanovych. No TLS certificate was observed, meaning the site operated without encryption when it was reachable. The threat profile classifies the activity as a crypto‑related phishing campaign.

Google Safe Browsing has flagged the domain for social engineering, and PhishDestroy has listed it on a dedicated blocklist, representing a single confirmed blocklist entry. The domain appears in three AlienVault OTX pulses, further corroborating its malicious use. VirusTotal scans show that twenty of ninety‑three security engines returned a positive detection, reinforcing the high‑risk assessment. Gridinsoft assigned a trust score of 1 out of 100, indicating an extremely low reputation. Because the site is already taken offline, active mitigation is limited to preventing future resolution.

Defensive teams should add the IP address 45.131.46.91 to network deny lists, block the domain at DNS filtering layers, and ensure that any existing redirects to this host are removed. Monitoring for re‑registration or usage of the same nameserver set is advisable, as attackers frequently recycle infrastructure. The lack of an SSL certificate and the low trust score suggest that the infrastructure was not hardened, but the presence on multiple intelligence sources confirms that the domain was used for illicit crypto phishing. Until the domain is definitively removed from all resolver caches, continued vigilance is recommended.