soltokenboost[.]com

Analysis of the domain www.soltokenboost.com shows that it was registered on February 22, 2026 through Porkbun LLC and is hosted on DigitalOcean infrastructure, using the standard nameservers ns1.digitalocean.com, ns2.digitalocean.com, and ns3.digitalocean.com. The domain resolves to the IPv4 address 178.62.125.50. As of the report date, July 22, 2026, the site remains active and has been listed on a single security blocklist. It is also flagged by the PhishDestroy blocklist, indicating that at least one anti‑phishing service has taken action against it.

VirusTotal records show that the domain has been scanned by 95 AV engines, none of which have generated a detection. This lack of detections should not be interpreted as evidence of benign intent; it merely reflects the current coverage of the scanners. No public information is available regarding SSL/TLS configuration, HTTP response codes, Safe Browsing status, or any page‑title metadata, leaving the content of the site unverified. The limited visibility suggests that the threat actor may be relying on a short‑lived or low‑profile deployment.

Defenders should consider adding the domain and its resolving IP address to network‑level deny lists, monitor DNS queries for the domain, and watch for any traffic to the associated IP. Continuous re‑scanning on VirusTotal and inclusion in broader phishing‑specific blocklists are recommended to capture any future changes in detection status. Given the recent creation date and the lack of additional intelligence, the domain should be treated as a potential credential‑harvesting vector until further evidence clarifies its purpose.