solhouse[.]top

Analysis of solhouse.top, created on July 30 2026 and hosted on Cloudflare’s infrastructure (nameservers chris.ns.cloudflare.com and zoe.ns.cloudflare.com, IP 188.114.96.3), shows multiple indicators of compromise. The domain is listed on three security blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL, suggesting it is being used in credential‑stealing campaigns. Google Safe Browsing classifies the site as a social‑engineering threat, reinforcing the suspicion of phishing activity.

The registration record lists NameSilo, LLC as the registrar, a common service for disposable or rapidly‑created domains. A VirusTotal scan involving 91 antivirus engines returned no detections at the time of analysis, but the absence of detections does not confirm the domain is benign, especially given the other risk signals. Current status remains active, indicating the infrastructure is still reachable.

Uncertainties include the exact content served by the site, the presence of SSL/TLS certificates, and any additional payloads that may be delivered after initial contact. Defenders should continue to block solhouse.top at network perimeters, update intrusion‑prevention signatures, and monitor outbound traffic for connections to the associated IP address. Further investigation, such as sandboxing the site’s landing page and capturing HTTP responses, would clarify the payload and help refine detection rules.