sollroll[.]fun

The domain sollroll.fun was registered on July 20, 2026 through Global Domain Group LLC. DNS resolution points exclusively to the IPv4 address 188.114.97.3, and the authoritative name servers are dimitris.ns.cloudflare.com and khloe.ns.cloudflare.com, indicating use of Cloudflare’s DNS service. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that it is being treated as malicious by at least one reputable threat‑intelligence source. VirusTotal records show that the domain was submitted to 91 scanning engines, none of which returned a detection at the time of analysis; the absence of detections does not imply benign intent, especially given the blocklist evidence. Current passive checks reveal that the domain remains active and continues to resolve to the same IP address, suggesting that the infrastructure is still operational.

No public SSL certificate details, HTTP status codes, page title, or content snapshots are available in the provided intelligence, leaving the exact phishing delivery method and target brand undefined. Consequently, the precise content and victim‑interaction flow cannot be confirmed at this stage. Defenders should add sollroll.fun to local DNS block lists and firewall deny lists, enforce outbound filtering for the host 188.114.97.3, and monitor Cloudflare name‑server traffic for any anomalous queries.

Continuous re‑scanning on VirusTotal or equivalent multi‑engine platforms is recommended to capture any future payload changes. Correlation with other activity observed from the same IP or name‑servers may uncover additional malicious domains that share this hosting profile. Until further forensic evidence becomes available, the domain should be regarded as a confirmed phishing infrastructure and treated accordingly.