soltest[.]app

Analysis of soltest.app, observed on July 24, 2026, indicates a high‑confidence crypto‑related impersonation campaign targeting the Binance brand. The site is listed on two independent security blocklists—PhishDestroy and ScamSniffer—demonstrating that multiple threat‑intelligence feeds have flagged it as malicious. Domain resolution points to the IPv4 address 69.57.162.183, which belongs to the Namecheap hosting network (ASN 22612) and is geolocated in the United States. The registration details show the domain was provisioned through Namecheap’s registrar platform (NAMEC-4), confirming the same hosting infrastructure.

No TLS certificate is presented for the domain, leaving the HTTP connection unencrypted and further reducing trust. A Gridinsoft trust score of 0 out of 100 reinforces the assessment of the domain as highly suspicious. VirusTotal reports that two of ninety‑five scanning engines flagged the domain, providing additional independent confirmation of malicious intent. The page title retrieved from the site—"SOL Tester - AML Crypto Risk Checker for BTC, USDT, ETH, TON and other coins"—explicitly references cryptocurrency risk checking, aligning with the classified scam type of a crypto scam.

The site currently reports an offline status, meaning active content cannot be examined directly; however, the existing metadata is sufficient to infer a brand‑impersonation vector aimed at Binance users. Defenders should immediately block soltest.app at network perimeter and DNS layers, monitor for other domains hosted on the same Namecheap name‑servers (dns1.namecheaphosting.com, dns2.namecheaphosting.com), and consider broader surveillance of newly registered domains under the same registrar that reference cryptocurrency terms. Continued observation of threat‑intel feeds for related indicators of compromise is recommended to detect any re‑hosting attempts or derivative campaigns.