MALICIOUS — CRITICAL
solbot1[.]cc
9 of 91 security engines flagged the domain; 1 public blocklist listed it (ScamSniffer); the latest stored check returned HTTP 200.
- VirusTotal
- 9/91
- Blocklists
- 1 · ScamSniffer
- Disponibilidad
- Último activo conocido · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
solbot1.cc — Último activo conocido (HTTP 200). Resumen de las pruebas: VirusTotal 9/91 (alphaMountain.ai, BitDefender, CRDF, Forcepoint ThreatSeeker, Fortinet); 1 external blocklist match (ScamSniffer); PhishDestroy score 87/100. Registrador: Gname.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Evidence Digest
solbot1.cc has a stored critical classification with an evidence score of 87/100. 9 of 91 security engines flagged the domain; 1 public blocklist listed it (ScamSniffer). Registered 21 May 2026 via Gname.com Pte. Ltd., hosted on 104.21.87.204 (Cloudflare, Inc., CA). The latest stored check on 9 Aug 2026 returned HTTP 200.
Stored generated summary (templated)cerebras · 13/07/2026
Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.
Analysis of solbot1.cc shows a newly registered domain (creation date 21 May 2026) that is actively serving HTTP content (status 200) behind Cloudflare infrastructure (IP 104.21.87.204, CA location). The domain uses a Let's Encrypt certificate (E8) and is delegated to Cloudflare nameservers gigi.ns.cloudflare.com and matt.ns.cloudflare.com. Reputation data is poor: Gridinsoft assigns a trust score of 0/100, the domain appears on two security blocklists, and it has been flagged by the PhishDestroy and ScamSniffer blocklists. AlienVault OTX lists the domain in one threat pulse, and VirusTotal reports three detections out of 91 scanned vendors. Registration was performed through Gname.com Pte. Ltd., a registrar often associated with disposable or low‑cost registrations. The combination of a fresh registration, zero trust score, multiple blocklist listings, and positive detections on VirusTotal aligns with the high‑risk generic phishing classification. Uncertainty remains regarding the specific payload or victim targeting, as no page content or phishing kit details are available. Defenders should block or sinkhole the domain at the network perimeter, monitor DNS queries for the associated IP and nameservers, and include the domain in threat‑intel feeds. Continuous re‑scanning on VirusTotal or similar services is advised to capture any evolving indicators.
Cobertura de los datos12 recorded checks
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
Análisis de VirusTotal
Análisis de la configuración del sitio
Datos y informes externosIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.