# PhishDestroy domain threat record: solpot.fr Content language: English Canonical HTML report: https://phishdestroy.io/domain/solpot.fr/ Machine-readable companion: https://phishdestroy.io/domain/solpot.fr/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 02:02:33 UTC - Last availability or vendor check: 2026-10-23 10:29:32 UTC - Stored record updated: 2026-10-23 18:22:39 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: mastercard ## Stored infrastructure - Observed IP address: 104.21.1.170 - Registrar in stored WHOIS data: NETIM - Registrar country in stored WHOIS data: FR - Last stored HTTP status: 200 - Registration date (registry RDAP, solpot.fr): 2026-07-29 09:59:24 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1667d-0626-76aa-9a01-7c001d1d50ca/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/solpot.fr - Certificate Transparency search: https://crt.sh/?q=%25.solpot.fr - Web Archive lookup: https://web.archive.org/web/*/https://solpot.fr/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed solpot.fr as malicious based on an automated detection that found a VirusTotal malicious flag for the domain. The recorded page title and excerpt read “Solpot Casino — Casino en ligne officiel et licencié”, which the intake analysis identified as a common claim used by fraudulent gambling sites. The domain was first seen by PhishDestroy on 2026-10-23, 86 days after its registration on 2026-07-29, and an HTTP 200 response was recorded on that date. How the scam works Fake online casino pages present themselves as licensed operators to entice users into creating accounts, depositing funds, or providing personal and payment details. Victims are then deprived of their money or credentials once the operators disappear, relying on the appearance of legitimacy to build trust. Evidence VirusTotal reported one malicious detection out of 92 engines, with Bfore.Ai PreCrime labeling the domain malicious on 2026-10-23. Google Safe Browsing returned no warning on the same day. urlscan.io scans on 2026-10-21 and 2026-10-23 gave an overall clean verdict, but the later scan’s engine analysis assigned a malicious tag with a score of 80. External blocklists MetaMask and SEAL listed the domain, checked on 2026-10-23. OTX showed four pulses referencing the domain, also checked on 2026-10-23. PhishDestroy’s internal blocklist contains the domain. Infrastructure The domain was registered with NETIM on 2026-07-29 and shows a client‑transfer‑prohibited status. Hosting is provided through Cloudflare, with recorded IPv4 addresses 104.21.1.170 and 172.67.129.167 and corresponding IPv6 addresses. TLS was supplied by Google Trust Services, using a certificate valid from 2026-10-04 to 2027-01-02. No DNSSEC records were observed. The certificate’s SAN includes solpot.fr and *.solpot.fr. What to do Visitors should avoid entering any personal, financial or login information on the site and should not make any deposits. If credentials were submitted, change the associated passwords and monitor accounts for unauthorized activity. Defenders can add the domain and its recorded IP addresses to blocklists, review access logs for connections to these addresses, and apply web‑filtering rules to prevent future access. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1667d-0626-76aa-9a01-7c001d1d50ca/ Cloudflare Radar report: https://radar.cloudflare.com/scan/63ae8ae0-a878-4997-962c-b8da5b83c5e1 URLQuery report: https://urlquery.net/report/9f08dcac-8dcf-4e0d-9dd9-7a97135383fb Stored capture screenshot: https://urlscan.io/screenshots/01a1667d-0626-76aa-9a01-7c001d1d50ca.png Cloudflare Radar screenshot (2026-10-23T02:53:12Z): https://screenshots.phishdestroy.io/cf/63ae8ae0-a878-4997-962c-b8da5b83c5e1.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/9f08dcac-8dcf-4e0d-9dd9-7a97135383fb.png URLScan screenshot (2026-10-17T13:53:18Z): https://screenshots.phishdestroy.io/us/01a14a23-4b51-75d7-a2e0-6e9991d66608.png URLScan capture report: https://urlscan.io/result/01a14a23-4b51-75d7-a2e0-6e9991d66608/ URLScan screenshot (2026-10-17T17:10:49Z): https://screenshots.phishdestroy.io/us/01a14ad8-010f-77ff-899e-a31ead8dfb8e.png URLScan capture report: https://urlscan.io/result/01a14ad8-010f-77ff-899e-a31ead8dfb8e/ URLScan screenshot (2026-10-21T06:15:21Z): https://screenshots.phishdestroy.io/us/01a15d19-7ffc-775f-99c9-5b0587a6a08a.png URLScan capture report: https://urlscan.io/result/01a15d19-7ffc-775f-99c9-5b0587a6a08a/ VirusTotal report: https://www.virustotal.com/gui/domain/solpot.fr Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=solpot.fr Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 02:59:42 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a1667d-0626-76aa-9a01-7c001d1d50ca.png Captured: 2026-10-23 02:02:33 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a1667d-0626-76aa-9a01-7c001d1d50ca.png Captured: 2026-10-23 02:02:33 UTC Source report: https://urlscan.io/result/01a1667d-0626-76aa-9a01-7c001d1d50ca/ - URLScan capture 2: https://urlscan.io/screenshots/01a15d19-7ffc-775f-99c9-5b0587a6a08a.png Captured: 2026-10-23 01:35:55 UTC Source report: https://urlscan.io/result/01a1667d-0626-76aa-9a01-7c001d1d50ca/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/63ae8ae0-a878-4997-962c-b8da5b83c5e1.png Captured: 2026-10-23 02:53:12 UTC Source report: https://radar.cloudflare.com/scan/63ae8ae0-a878-4997-962c-b8da5b83c5e1 SHA-256: a4c2a6e4efcb2fda98981e92055a40eaf39aef4e4e4af09039108bfc019927a5 - URLQuery: https://screenshots.phishdestroy.io/uq/9f08dcac-8dcf-4e0d-9dd9-7a97135383fb.png Source report: https://urlquery.net/report/9f08dcac-8dcf-4e0d-9dd9-7a97135383fb SHA-256: e8e796a48dbc74f8a02d3178499b0a7dfc939323290facc423e357f5083775a3 - URLScan · 2026-10-17: https://screenshots.phishdestroy.io/us/01a14a23-4b51-75d7-a2e0-6e9991d66608.png Captured: 2026-10-17 13:53:18 UTC Source report: https://urlscan.io/result/01a14a23-4b51-75d7-a2e0-6e9991d66608/ SHA-256: 43baf8bdad382c06f8fdaab44f58a80557a8af9a928e2f388a0fb8856239b390 - URLScan · 2026-10-17: https://screenshots.phishdestroy.io/us/01a14ad8-010f-77ff-899e-a31ead8dfb8e.png Captured: 2026-10-17 17:10:49 UTC Source report: https://urlscan.io/result/01a14ad8-010f-77ff-899e-a31ead8dfb8e/ SHA-256: b947f2bfdade5da606d4acffe3585d2ca194f2328a2b28e74bb57cf5e7ac2525 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15d19-7ffc-775f-99c9-5b0587a6a08a.png Captured: 2026-10-21 06:15:21 UTC Source report: https://urlscan.io/result/01a15d19-7ffc-775f-99c9-5b0587a6a08a/ SHA-256: 1ce378793cbb62f934f0944cafea8d6b8030bd32166c66b564539d5864615e0f ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T02:58:49Z", "uuid": "01a1667d-0626-76aa-9a01-7c001d1d50ca", "scanned_at": "2026-10-23T02:00:45Z", "final_url": "https://solpot.fr/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://solpot.fr/", "from": "http://solpot.fr/", "status": 307 }, { "to": "http://solpot.fr/", "from": "https://solpot.fr/", "status": 307 }, { "to": "https://solpot.fr/", "from": "http://solpot.fr/", "status": 307 } ], "ip": "104.21.1.170", "domains": [ "mc.yandex.com", "mc.yandex.ru", "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.14.94", "87.250.251.119", "142.251.13.95", "104.21.1.170" ], "asns": [ "15169", "13238", "13335" ], "countries": [ "US", "RU" ], "doc_hash": "ba44b1e08d1f92fe70f79a46259ba8cc5c3c8e0d2d98b617e364b4e2e5649e09", "script_hashes": [ "38e2ba79cdfce6e5de68e504e7ffe51c325256a5ac778df3da7e0f7a0b3f474c", "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8" ], "globals": [ "ym", "Ya", "yaCounter105717702", "dataLayer" ], "cookies": [ "bh", "_ym_uid", "_ym_d", "sync_cookie_csrf", "yabs-sid", "i", "yandexuid", "yuidss", "ymex", "sync_cookie_csrf_secondary", "sync_cookie_ok_secondary", "_ym_isad", "visitor_id" ], "storage_keys": [ "_ymBRC", "_ym_synced", "_ym105717702_lsid", "_ym105717702:0_reqNum", "_ym_uid", "_ym_retryReqs", "_ym_jn" ], "tls": { "san": [ "solpot.fr", "*.solpot.fr" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "solpot.fr", "protocol": "TLS 1.3", "valid_to": "2027-01-02T16:08:48Z", "valid_from": "2026-10-04T15:08:53Z" }, "domain_age_days": 82, "apex_age_days": 82, "tls_age_days": 18, "tls_valid_days": 90, "requests": 27, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 80, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T02:58:51Z", "uuid": "63ae8ae0-a878-4997-962c-b8da5b83c5e1", "scanned_at": "2026-10-23T02:53:12Z", "final_url": "https://solpot.fr/", "status": 200, "history": [ { "url": "https://solpot.fr/", "status": 200 } ], "dom_hash": "a81b66298ff9ec9a05c9e31ab0c9ca69ddf48b3dbf228594119e7890c6ae688c", "doc_hash": "7c267471f16bbba3db47fe3078403de5b1422ad0a9fd6b9ed975d9b167875207", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "solpot.fr", "type": "A", "value": "172.67.129.167" }, { "name": "solpot.fr", "type": "A", "value": "104.21.1.170" }, { "name": "solpot.fr", "type": "AAAA", "value": "2606:4700:3033::ac43:81a7" }, { "name": "solpot.fr", "type": "AAAA", "value": "2606:4700:3035::6815:1aa" } ], "dnssec_valid": false, "ip": "172.67.129.167", "whois": { "registrar": "NETIM", "created": "2026-07-29T09:59:24Z", "updated": "2026-08-06T11:05:35Z", "expires": "2027-07-29T09:59:24Z", "nameservers": [ "ariella.ns.cloudflare.com", "ricardo.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T02:52:21Z", "analysis_at": "2026-10-23T02:42:33Z", "stats": { "timeout": 0, "harmless": 54, "malicious": 1, "suspicious": 0, "undetected": 37 }, "detections": { "Bfore.Ai PreCrime": "malicious" }, "reputation": 0, "registrar": "NETIM", "first_seen": "2026-08-06T12:56:54Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::6815:1aa" }, { "ttl": 21600, "type": "NS", "value": "ricardo.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::ac43:81a7" }, { "ttl": 300, "type": "A", "value": "104.21.1.170" }, { "ttl": 300, "type": "A", "value": "172.67.129.167" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "ariella.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "ariella.ns.cloudflare.com" } ], "dns_at": "2026-10-23T02:47:53Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "solpot.fr", "*.solpot.fr" ], "issuer": "Google Trust Services / WE1", "serial": "bf31941c0687df1e13e0315a12547ee6", "sha256": "6f992fc456f29b145a2650d8f5840bd4003f19e44ae8663b7f3a6fe8c3877bfd", "subject": "solpot.fr", "valid_to": "2027-01-02T16:08:48Z", "valid_from": "2026-10-04T15:08:53Z" }, "whois": { "registrar": "NETIM" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-07-29T09:59:24Z", "last changed": "2026-08-06T11:05:35Z", "registration": "2026-07-29T09:59:24Z", "last update of RDAP database": "2026-10-17T13:53:47Z" }, "registrar_iana_id": "1519" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T02:59:03Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "solpot.fr" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-23T01:40:41Z", "first": "2026-10-23T01:40:41Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 27353 }, "robots_txt": { "agents": [ "*" ], "present": true }, "social_tags": { "title": "Solpot Casino — Casino en ligne officiel et licencié", "ogType": "website", "ogTitle": "Solpot Casino — Casino en ligne officiel et licencié", "ogSiteName": "Solpot Casino", "description": "Bienvenue sur Solpot Casino, votre casino en ligne officiel, sécurisé et licencié. Profitez d'une vaste sélection de machines à sous, de paris sportifs, de tables en direct et de jeux de loterie, le tout accompagné de bonus exclusifs. Une expérience de jeu claire, fiable et pensée pour vous.", "canonicalUrl": "https://solpot.fr/frfr2022/", "ogDescription": "Bienvenue sur Solpot Casino, votre casino en ligne officiel, sécurisé et licencié. Profitez d'une vaste sélection de machines à sous, de paris sportifs, de tables en direct et de jeux de loterie, le tout accompagné de bonus exclusifs. Une expérience de jeu claire, fiable et pensée pour vous." }, "trackers": { "requests": 23, "trackers": [ { "name": "Yandex", "company": "Yandex", "country": "RU", "category": "Advertising", "requests": 1 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 4 }, { "name": "Yandex Metrika", "company": "Yandex", "country": "RU", "category": "Site Analytics", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 1, "tls": 12, "wait": 130, "connect": 14, "download": 89 }, "response_ms": 246 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 105420, "co2_grams": 0.0039, "cleaner_than": 21 }, "dns_server": { "ns": [ { "ip": "172.64.34.32", "host": "ariella.ns.cloudflare.com" }, { "ip": "108.162.195.211", "host": "ricardo.ns.cloudflare.com" } ], "zone": "solpot.fr" }, "cookies": { "cookies": [ { "name": "visitor_id", "http_only": true, "same_site": "Lax" }, { "name": "bh", "secure": true, "same_site": "None" }, { "name": "_ym_uid", "secure": true, "same_site": "None" }, { "name": "_ym_d", "secure": true, "same_site": "None" }, { "name": "sync_cookie_csrf", "secure": true, "same_site": "None" }, { "name": "_ym_isad", "secure": true, "same_site": "None" }, { "name": "sync_cookie_csrf", "secure": true, "same_site": "None" }, { "name": "yabs-sid", "secure": true, "session": true, "same_site": "None" }, { "name": "i", "secure": true, "http_only": true, "same_site": "None" }, { "name": "yandexuid", "secure": true, "same_site": "None" }, { "name": "yuidss", "secure": true, "same_site": "None" }, { "name": "ymex", "secure": true, "same_site": "None" }, { "name": "receive-cookie-deprecation", "secure": true, "http_only": true, "same_site": "None" }, { "name": "bh", "secure": true, "same_site": "None" } ] }, "location": { "ip": "2606:4700:3035::6815:1aa", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "solpot.fr" }, "dns": { "A": [ "172.67.129.167", "104.21.1.170" ], "NS": [ "ariella.ns.cloudflare.com", "ricardo.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"ariella.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417906087, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3033::ac43:81a7", "2606:4700:3035::6815:1aa" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3035::6815:1aa", "family": 6 }, "redirects": { "chain": [ "https://solpot.fr" ] }, "tech_stack": { "technologies": [ "Yandex.Metrika", "Google Font API", "Cloudflare", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 9 }, "whois": { "registrar": "NETIM", "created": "2026-07-29T09:59:24Z", "updated": "2026-08-06T11:05:35Z", "expires": "2027-07-29T09:59:24Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ariella.ns.cloudflare.com", "ricardo.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } } } } ```