sol-incinirator[.]xyz

This domain, sol-incinirator.xyz, is flagged as a brand impersonation phishing site targeting Discord, a widely used communication platform. The site presents itself under the page title 'Sol Incinerator,' likely designed to deceive users into believing it is an official or affiliated service. No specific drainer kit has been conclusively linked to this infrastructure, but the domain exhibits characteristics consistent with credential harvesting or social engineering attacks aimed at Discord’s user base. Analysis indicates the domain was registered on September 03, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 104.21.59.47, which is associated with Cloudflare, Inc. (AS13335) in the United States. The domain appears on two security blocklists and is flagged by 9 out of 95 security vendors on VirusTotal. The SSL certificate is classified as WE1, a low-assurance certificate type often observed in malicious infrastructure. Despite its short operational window, the domain has been blocked by multiple detection systems. As of the latest assessment, sol-incinirator.xyz has been taken offline, reducing immediate exposure risk. However, the infrastructure remains a potential threat due to the domain’s recent registration and the registrar’s history with abusive registrations. Organizations and users are advised to monitor for re-emergence under similar naming conventions or IP ranges. Network defenders should update blocklists to include this domain and its associated IP, while users should verify the authenticity of any Discord-related communications or services before engaging.