solutiocontacto[.]sbs

solutiocontacto.sbs was registered through Dynadot LLC and first observed on October 26, 2025. The domain resolves to 77.72.2.112, an address hosted by Krystal Hosting Ltd in the United Kingdom (AS12488). DNS resolution is provided by ns1.dyna-ns.net and ns2.dyna-ns.net. No TLS certificate is presented, indicating that connections are unencrypted. The site’s HTML title reports “Humanity First | Worldwide Humanitarian Charity”, yet the domain is classified as a crypto‑scam that impersonates the brand “across”. The underlying campaign targets cryptocurrency victims by leveraging the perceived legitimacy of the humanitarian organization.

VirusTotal analysis returned 12 positive detections out of 95 scanners, confirming malicious intent. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. Reputation services assign a Gridinsoft trust score of 0 out of 100, reflecting extreme risk. The current operational status is offline, but historical activity suggests the infrastructure was used for fraudulent fundraising. Evidence gaps remain: the specific payload or dropper used by the campaign has not been publicly disclosed, and no sample of the malicious page content is available for deeper forensic review.

Additionally, the exact relationship between the “across” brand reference and the humanitarian charity title has not been clarified. Defenders should add 77.72.2.112 and the domain solutiocontacto.sbs to deny‑list entries on perimeter firewalls and DNS filtering solutions. Continuous monitoring of the associated nameservers and the host ASN is recommended to detect re‑hosting attempts. Organizations that have processed cryptocurrency transactions should verify that no communications originated from this domain, and any suspicious activity should be reported to the relevant incident response team. Further analysis of the 12 VirusTotal detections may provide indicators of compromise for endpoint detection and response tools.