# sola-xy.pages.dev — SUSPICIOUS

> PhishDestroy flags sola-xy.pages.dev as a credential theft domain with 0/95 VirusTotal detections. Analyze now before exposure grows.

## Summary
PhishDestroy identifies a currently active credential theft domain, sola-xy.pages.dev, which is hosted on Cloudflare Pages and linked to Google Trust Services infrastructure. This domain appears designed to harvest user credentials under the guise of a legitimate service, though no direct brand impersonation has been confirmed at this stage. The domain resolves to IP 172.66.47.162 and operates with a Google-issued SSL certificate, lending it an air of legitimacy that threat actors frequently exploit to deceive targets.  This domain shows zero detections (0/95) on VirusTotal as of the latest scan, indicating it remains under the radar of most security engines. It is registered through Cloudflare, Inc., a common choice for malicious actors seeking anonymity and rapid deployment. The associated IP, 172.66.47.162, is part of Cloudflare’s infrastructure, which is often leveraged to obscure malicious activity. While the exact creation date is not publicly available, the domain’s use of a Google Trust Services SSL certificate suggests recent registration, as threat actors increasingly favor trusted issuers to evade detection. Notably, this domain has not been identified or blocked by Google Safe Browsing (GSB) as of this analysis.  The current status of sola-xy.pages.dev is active and under investigation, with low immediate detection coverage despite its malicious intent. Users and organizations are advised to block this domain at the network perimeter and inspect DNS query logs for signs of compromise. The lack of detections signals a critical window for proactive defense; however, the risk remains moderate due to the domain’s evasive tactics and reliance on trusted infrastructure. Immediate mitigation is strongly recommended to prevent potential credential theft incidents.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.162

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2a384aec-7778-4f99-8a46-78922d34fd19
- PhishDestroy: https://phishdestroy.io/domain/sola-xy.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/sola-xy.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/sola-xy.pages.dev/
Last updated: 2026-03-24