sol-distribution[.]xyz

The domain sol-distribution.xyz was observed serving a page whose HTML title is "Just a moment...". The site lacks an SSL certificate and returns no HTTPS service. Registration data shows the domain was created on 2026-02-21 through PDR Ltd. d/b/a PublicDomainRegistry.com, and it resolves to the IP address 188.114.97.3, which belongs to Cloudflare (ASN 13335) located in the United States. The nameservers elle.ns.cloudflare.com and gerald.ns.cloudflare.com confirm the use of Cloudflare’s DNS infrastructure. The domain is flagged as a brand‑impersonation scam targeting the Solana cryptocurrency ecosystem; the intelligence classifies the activity as a crypto scam.

The Gridinsoft trust score is 0 out of 100, indicating a high likelihood of malicious intent. VirusTotal reports three of ninety‑three scanners flagging the domain, reinforcing the suspicion. The domain appears on one known security blocklist and is listed as blocked by PhishDestroy. No SSL certificate is present, so the HTTP response is likely plain‑text, and the page title suggests a possible Cloudflare challenge page rather than a legitimate login interface.

The limited detection footprint—only a single blocklist entry and three vendor detections—means additional monitoring is advisable. Defenders should add the domain to internal deny lists, monitor DNS queries for the associated IP and Cloudflare nameservers, and consider reporting the indicator to additional threat‑intel sharing platforms. Because the site is currently offline, ongoing checks for re‑appearance are recommended. The lack of further public analysis, such as malware payloads or phishing page screenshots, leaves the exact content of the site uncertain; however, the combination of brand impersonation, low trust score, and vendor detections suggests a high‑risk crypto‑related phishing campaign.