fauci-sol[.]xyz

The domain fauci-sol.xyz is currently flagged by security tooling as a generic phishing site and remains active. It appears on a single security blocklist (PhishDestroy) and has been recorded as a phishing indicator in the internal repository. DNS resolution points to the IP address 188.114.96.10, which is served from Cloudflare’s network; the authoritative name servers are byron.ns.cloudflare.com and irena.ns.cloudflare.com. The domain was registered on 30 July 2026 through Global Domain Group LLC, indicating a recent creation that aligns with typical short‑lived phishing campaigns.

A VirusTotal scan performed by 91 antivirus and URL‑reputation engines returned no detections, but the lack of a positive label does not imply safety; many phishing payloads evade static analysis and rely on dynamic content. No page title, brand targeting, SSL certificate details, or HTTP response codes have been published, so the exact content and credential‑harvesting technique remain unknown. Defensive teams should therefore treat the domain as malicious until further evidence proves otherwise.

Recommended actions include adding fauci-sol.xyz to URL‑filtering and DNS‑sinkhole policies, blocking outbound connections to 188.114.96.10, and monitoring for any traffic that matches the Cloudflare name‑server pattern. Continuous re‑evaluation of the domain’s status on blocklists and periodic re‑scans with dynamic analysis tools are advised to capture any changes in payload or hosting. Because the domain is newly created, rapid takedown requests to the registrar may be effective if the site is confirmed to be used for credential theft.