solafi[.]xyz

solafi.xyz emerges as a cryptocurrency phishing threat, first detected on June 22, 2026. The domain is flagged by one out of 91 vendors on VirusTotal, indicating early detection and limited awareness among security vendors. The site has since been taken offline, but its initial presence highlights the ongoing risks associated with cryptocurrency scams.

The domain is registered with PDR Ltd. and hosted on an IP managed by Cloudflare, Inc. in the United States. It was operational for a brief period, exploiting the window before comprehensive antivirus database updates could occur. This highlights the importance of early threat detection in mitigating potential damage from phishing sites.

Public blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL, have flagged solafi.xyz, underscoring its malicious intent. The SSL certificate issued by Google Trust Services suggests an attempt to appear legitimate and trustworthy to potential victims. Despite its short-lived activity, solafi.xyz serves as a reminder of the persistent threat posed by phishing domains in the cryptocurrency sector.