zsol[.]top

This domain, zsol.top, is identified as a fake login portal designed to harvest user credentials through brand impersonation. Analysis indicates the infrastructure is currently offline, though it remains a documented threat in active intelligence repositories. The page title 'Just a moment...' suggests the use of anti-bot or cloaking mechanisms to evade detection during initial access attempts. Infrastructure analysis reveals the domain was registered on April 12, 2026, through 耐思尼克国际集团有限公司, a registrar frequently associated with malicious activity. It resolves to the IP address 188.114.96.3 and is flagged by 2 of 95 security vendors on VirusTotal. The domain appears on three security blocklists, and its SSL certificate is issued by Google Trust Services (WE1), a detail often exploited to lend false legitimacy. A single threat intelligence pulse in AlienVault OTX further corroborates its malicious classification. While zsol.top is currently offline, its prior activity and infrastructure warrant caution. Organizations and users are advised to block the domain and its associated IP at the network level. Security teams should monitor for related indicators, including the registrar and SSL certificate issuer, as part of broader threat hunting efforts. If credentials were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended for all potentially compromised accounts.