solayer-staking[.]com

Analysis of solayer-staking.com shows a newly registered domain created on July 17, 2026 that is currently active and listed on a single security blocklist. The domain is hosted on IP address 186.2.175.35 and uses four nameservers: ares.trustname.com, ns1.anycastdns.cz, ns2.anycastdns.cz, and zeus.trustname.com. Registration was performed through Fewmoretaps OU operating as Trustname.com, indicating a possible reuse of the Trustname branding for registrar services.

The domain has been flagged by the PhishDestroy blocklist, confirming that at least one external threat‑intelligence feed has identified it as malicious. VirusTotal reports that the domain has been scanned by 95 vendors, yet none have raised a detection at the time of the scan; this absence of detections does not imply safety and should be treated as inconclusive. No public information is available regarding SSL certificates, HTTP response codes, page titles, or content analysis, so the exact phishing lure or target brand remains unknown.

The limited visibility suggests a low‑profile deployment, potentially intended to avoid early detection while awaiting victim interaction. Defenders should proactively block the domain and its associated IP address at network perimeters, add the nameserver set to watch lists, and continue to monitor for any emergence of content or credential‑harvesting activity. Continuous re‑scanning with multi‑vendor services is recommended to capture any later changes in behavior, and any future sightings should be correlated with this indicator set to improve attribution and response actions.