solfen[.]xyz

The domain solfen.xyz was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on July 12, 2026 and remains active as of the report date. DNS resolution points to the IPv4 address 188.114.96.3, hosted on a Cloudflare edge network indicated by the authoritative nameservers ezra.ns.cloudflare.com and jocelyn.ns.cloudflare.com. The site presents a valid TLS certificate issued by Google Trust Services under the WE1 series, which may be used to lend credibility to malicious payloads. VirusTotal scans show that two of ninety‑one security vendors have flagged the domain, suggesting that at least some detection engines have identified suspicious behavior. No public page content, landing page screenshots, or brand references have been disclosed, so the exact phishing lure cannot be confirmed. Given the recent registration, active status, and the presence of a trusted certificate, the infrastructure aligns with typical fast‑flux or throwaway phishing operations. Defenders should consider adding solfen.xyz to block lists, enforce DNS sinkholing, and monitor outbound connections to 188.114.96.3. Continuous re‑scanning on multi‑engine platforms is advised to capture any emerging detections.