solbot1[.]cc
Verifica phishing e sicurezza per solbot1.cc
solbot1.cc — Ultimo attivo conosciuto (HTTP 200). Riepilogo delle prove: VirusTotal 9/91 (alphaMountain.ai, BitDefender, CRDF, Forcepoint ThreatSeeker, Fortinet); 1 external blocklist match (ScamSniffer); PhishDestroy score 87/100. Registrar: Gname.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
Analysis of solbot1.cc shows a newly registered domain (creation date 21 May 2026) that is actively serving HTTP content (status 200) behind Cloudflare infrastructure (IP 104.21.87.204, CA location). The domain uses a Let's Encrypt certificate (E8) and is delegated to Cloudflare nameservers gigi.ns.cloudflare.com and matt.ns.cloudflare.com. Reputation data is poor: Gridinsoft assigns a trust score of 0/100, the domain appears on two security blocklists, and it has been flagged by the PhishDestroy and ScamSniffer blocklists. AlienVault OTX lists the domain in one threat pulse, and VirusTotal reports three detections out of 91 scanned vendors. Registration was performed through Gname.com Pte. Ltd., a registrar often associated with disposable or low‑cost registrations. The combination of a fresh registration, zero trust score, multiple blocklist listings, and positive detections on VirusTotal aligns with the high‑risk generic phishing classification. Uncertainty remains regarding the specific payload or victim targeting, as no page content or phishing kit details are available. Defenders should block or sinkhole the domain at the network perimeter, monitor DNS queries for the associated IP and nameservers, and include the domain in threat‑intel feeds. Continuous re‑scanning on VirusTotal or similar services is advised to capture any evolving indicators.
Copertura dei dati12 recorded checks
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
Analisi di VirusTotal
Analisi della configurazione del sito
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.