solming[.]com

solming.com was observed on July 12, 2026 as an active malicious web resource. The site returns an HTTP 301 redirect and presents the page title “【台南】太陽能表後儲能公司-屋頂太陽能板價格｜碩明綠能股份有限公司”. Intelligence sources label the campaign as a crypto‑related phishing operation, matching the generic_phishing threat type assigned in the current assessment. The domain was registered on February 21, 2026 through Net‑Chinese Co., Ltd. It resolves to the IPv4 address 103.129.178.170, which is announced by AS9924, a Taiwan Fixed Network, Telco and Network Service Provider. The authoritative name servers are ns188a.247-hosting.com and ns188b.247-hosting.com. A TLS certificate identified as “R11” is in use, and the web server stack reports Apache HTTP Server with client‑side libraries Snap.svg, Slick, jQuery and FancyBox. Reputation scoring from Gridinsoft assigns the domain a trust score of 0 out of 100, indicating a high likelihood of malicious intent. The site is listed on a single security blocklist and has been flagged by one of ninety‑five VirusTotal scanners. AlienVault OTX references the domain in a single threat‑intel pulse, and the anti‑phishing service PhishDestroy has already blocked it. No additional public observations of the page content have been released, so the exact phishing lure remains unverified beyond the crypto scam classification. Defenders should immediately block DNS resolution for solming.com and the associated IP 103.129.178.170 at perimeter filters. Monitoring of traffic to the 247‑hosting name servers may reveal further campaign infrastructure. Because the site employs a valid TLS certificate and a standard Apache stack, passive TLS inspection may be required to detect the redirect. Continued intelligence collection is advised to determine whether the domain is used in broader credential‑harvesting campaigns or cryptocurrency wallet theft.