sol[.]dapps-pro[.]xyz

The domain sol.dapps-pro.xyz was registered through OwnRegistrar, Inc. on September 25 2025 and is currently resolved to the IPv4 address 192.3.190.189, which is hosted by AS36352 (HostPapa) in the United States. No TLS certificate is presented for the site, indicating that HTTPS is not configured. The authoritative name servers listed are dns1.webproserver.com and dns2.webproserver.com. The site’s HTML title, as captured in the latest crawl, reads “smartfixedapprovals NodeRectifier”, which does not directly reference the targeted brand but the campaign is classified as brand impersonation targeting Avalanche. The operational intent is identified as wallet/seed phishing, aiming to harvest private keys or recovery phrases from victims who believe they are interacting with a legitimate Avalanche service.

Detection telemetry shows that 12 of 95 antivirus and URL‑reputation engines on VirusTotal have flagged the domain as malicious. Independent reputation services report a Gridinsoft trust score of 0 out of 100, and the domain is listed on two public security blocklists. Automated sinkhole services PhishDestroy and ScamSniffer have already blocked access to the host. The combination of low trust score, multiple vendor detections, and blocklist presence suggests a high likelihood of malicious activity despite the current offline status.

Defenders should add 192.3.190.189 to network‑level deny lists, enforce DNS filtering for sol.dapps-pro.xyz, and monitor any future changes in the domain’s hosting or SSL configuration. Continuous re‑scanning on VirusTotal and similar platforms is advised to capture any new detections. Because the registrar information is public, investigators may consider requesting registration details from OwnRegistrar, Inc. to support attribution efforts. Until the domain reappears, maintaining its blocklist entries will reduce the risk of accidental user exposure.