solboost[.]xyz

Analysis of solboost.xyz, identified as a high‑risk generic phishing site, shows that the domain was registered on December 02, 2025 through NameSilo, LLC and continues to resolve to the IPv4 address 188.114.97.3. The authoritative nameservers amy.ns.cloudflare.com and kai.ns.cloudflare.com indicate that the domain is hosted behind Cloudflare’s DNS service, a common choice for threat actors seeking to hide origin infrastructure. Threat intelligence feeds have placed the domain on two public blocklists and it is actively listed by the PhishDestroy and SEAL filtering platforms, confirming that multiple defensive sources already recognize it as malicious.

VirusTotal scans report that 7 out of 91 security vendors flagged the domain, providing independent corroboration of its malicious nature. No public SSL certificate details, HTTP response codes, or page title information are currently available, limiting the ability to assess the surface‑web content or any TLS fingerprint. Consequently, defenders lack visibility into the specific phishing payload or credential‑harvesting tactics employed.

Given the confirmed presence on blocklists, the Cloudflare‑based hosting, and the VirusTotal detections, organizations should immediately add solboost.xyz to DNS and web‑filter deny lists, monitor outbound connections to 188.114.97.3, and enforce strict email‑security controls to prevent credential submission to this domain. Continuous re‑evaluation is recommended, as additional indicators such as page content, TLS details, or downstream infrastructure could emerge in future investigations.