sol-incnierator[.]com

Analysis of sol-incnierator.com shows a recent domain created on 28 September 2025 and registered through Dynadot LLC. The site resolves to the IPv6 address 2a02:4780:27:2006:0:12f2:5473:10, which is hosted in France and associated with AS47583 Hostinger International Limited. No TLS certificate is presented, indicating the site operates without encryption. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, typical of parked or temporary services. The page title returned from HTTP requests is "Sol Incinerator", which does not directly reference the impersonated brand but the domain is listed as impersonating Discord and is classified as a wallet/seed phishing campaign.

VirusTotal has recorded 10 detections out of 95 submitted security vendors, confirming that multiple scanners flag the domain as malicious. Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the low reputation. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, demonstrating that at least one anti‑phishing service has taken remediation action. The combination of a recent registration, lack of SSL, low trust metrics, and multiple vendor detections aligns with the elevated risk rating.

However, the site is currently offline, limiting real‑time verification of content and HTTP response codes. Defenders should continue to block the IP address 2a02:4780:27:2006:0:12f2:5473:10 and the domain name in DNS filtering solutions, monitor for any re‑hosting attempts, and consider adding the domain to internal watchlists. Ongoing observation of the registrar Dynadot for potential bulk registrations may help anticipate future campaigns targeting Discord users.