solairgg[.]world

Analysis of solairgg.world, created on February 21 2026 and currently taken offline, shows a clear association with a crypto‑related phishing campaign. The site resolves to IP 94.141.122.141, hosted in Finland under AS205775 NEON CORE NETWORK LLC, and is served by Cloudflare nameservers curt.ns.cloudflare.com and ariella.ns.cloudflare.com. The lack of an SSL certificate indicates the site was delivered over plain HTTP, a common characteristic of low‑effort phishing or scam infrastructure.

Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist, confirming its malicious reputation. VirusTotal analysis records six detections out of ninety‑three scanning engines, reinforcing the suspicion. The page title returned as "Solana" aligns with the listed scam type of a crypto scam, suggesting the attacker may have attempted to lure victims with false Solana‑related offers.

The registrar listed is Web Commerce Communications Limited, a provider frequently used for disposable domains. Defenders should block the domain at perimeter firewalls, update URL filtering lists, and monitor traffic to the associated IP address for any residual activity. Because the site is offline, immediate threat exposure is reduced, but the observed indicators warrant continued observation and inclusion in threat intelligence feeds.