solara-consult[.]com

PhishDestroy flags solara-consult.com as an active credential theft domain engaged in brand impersonation targeting enterprise users. The domain leverages a deceptive consultancy theme to trick victims into submitting corporate login credentials, with infrastructure optimized for data exfiltration. Threat analysis indicates this is part of a broader campaign likely distributing stolen credentials to dark web markets or subsequent phishing stages.

Technical indicators reveal this threat employs minimal operational security: registered through HOSTINGER operations UAB on May 23, 2026, resolving to IP 92.113.16.216 with nameservers ns1.dns-parking.com and ns2.dns-parking.com. The domain currently shows 0/95 detections on VirusTotal despite active hosting, indicating evasion of automated detection systems. As of investigation, the domain remains unlisted on Google Safe Browsing (GSB) and has not been flagged by major threat intelligence platforms, suggesting a window of opportunity for malicious operations.

Current status remains active with under-investigation classification, presenting ongoing risk to unprotected users. PhishDestroy recommends immediate network-level blocking of the domain and associated IP address. Users should treat any correspondence from this domain as malicious and verify sender identities through official channels. The low detection rate despite active hosting emphasizes the need for heuristic-based security solutions and continuous monitoring of newly registered domains with consultancy themes.