iolonsol[.]lol

The domain iolonsol.lol has been identified as a generic_phishing threat specializing in cryptocurrency wallet credential harvesting. Analysis indicates this infrastructure was designed to impersonate legitimate wallet services, likely targeting users of decentralized finance platforms. As of the latest verification, the domain has been taken offline, though prior activity suggests it was actively collecting sensitive authentication details. Infrastructure analysis reveals the domain was registered on April 09, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolved to the IP address 188.114.97.3 and was flagged by 4 of 95 security vendors on VirusTotal. The domain appeared on three distinct security blocklists and received a trust score of 0/100 from Gridinsoft. Additional detection sources include MetaMask, PhishDestroy, and SEAL, all of which classified it as malicious. Current status confirms the domain is offline, though residual risk remains due to the potential reuse of collected credentials. Organizations and individuals are advised to monitor for unauthorized transactions, particularly those involving cryptocurrency wallets. Network administrators should ensure the domain and its associated IP address (188.114.97.3) are blocked at the perimeter. Users who interacted with the domain should immediately revoke any active sessions, reset credentials for associated services, and enable multi-factor authentication where available. Proactive threat hunting for related indicators of compromise is recommended to mitigate potential follow-on attacks.