incsols[.]xyz

incsols.xyz is currently flagged as a high‑risk generic phishing infrastructure. The domain was registered on June 30 2026 through OwnRegistrar, Inc. and resolves to the IPv4 address 188.114.96.3. As of the report date (19 July 2026) the domain remains active. VirusTotal has recorded detections from five of the ninety‑five scanning engines that examined the host, indicating that at least a subset of security products consider the domain malicious. The modest detection count suggests that the site may be newly deployed or that some scanners have not yet updated signatures. No additional contextual data such as page title, brand targeting, or malware kit has been disclosed, so the exact content and victim‑interaction flow are unknown. Defenders should treat any inbound traffic to incsols.xyz as suspicious. Network‑level blocking of the resolved IP address (188.114.96.3) and the domain itself is recommended, along with monitoring of DNS queries for the domain to detect possible internal resolution attempts. Email security gateways should be updated to flag messages containing links to incsols.xyz, and endpoint detection solutions should be configured to alert on connections to the host. Because the infrastructure is still active, continuous threat‑intel feeds should be consulted for any new indicators of compromise that may emerge.