xp[.]solar-desktop-app[.]com

The domain www.xp.solar-desktop-app.com was registered on October 23, 2025 through OwnRegistrar, Inc. and is hosted on the IP address 192.3.190.187, which resolves to a United States location under AS36352 (HostPapa). The site does not present an SSL certificate, indicating that traffic is unencrypted. Technical indicators show a Gridinsoft trust score of 0 out of 100 and the domain appears on a single security blocklist. It is currently listed as offline, and the phishing‑defense service PhishDestroy has flagged the host as blocked.

Two of ninety‑five VirusTotal scanners have raised alerts, reinforcing the suspicion of malicious activity. The authoritative nameservers are dns1.webproserver.com and dns2.webproserver.com. The page title returned from the site is "Solar.org - Home," which bears no relation to the advertised brand. The domain is explicitly noted to impersonate CoinMarketCap, and the scam classification is recorded as a crypto‑related scam.

While the limited number of detections and the absence of SSL suggest a low‑sophistication operation, the combination of a zero trust score, blocklist inclusion, and vendor flags provides sufficient evidence for defensive action. Organizations should add the domain and its associated IP address to blocklists, monitor for any re‑registration or new sub‑domains, and ensure that URL filtering solutions are updated to capture this impersonation vector. Uncertainties remain regarding the exact payload or phishing page content, as no visual analysis has been performed; continued observation is advised.