verificationsolcex[.]com

Analysis of www.verificationsolcex.com reveals a short‑lived infrastructure that was actively used for a crypto‑focused phishing campaign. The domain was registered on 12 March 2026 through HOSTINGER operations, UAB and immediately pointed to the IP address 46.202.145.163, which belongs to AS47583 Hostinger International Limited located in Brazil. DNS resolution uses the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com, a pattern frequently observed in disposable phishing sites. The web server identifies as LiteSpeed and serves content over HTTP/3, while Google Analytics scripts are present, indicating the operator attempted to collect visitor metrics.

The site presented the page title “Quiz Pippin”, but no further content has been captured; the exact page behavior remains unverified because the domain is currently offline. Transport‑layer security is provided by a Let’s Encrypt certificate (R12), confirming that the site employed a valid TLS handshake despite its malicious purpose. The domain appears on a single security blocklist and has been flagged by one of ninety‑five VirusTotal scanners, reinforcing the suspicion of abusive activity. PhishDestroy has already taken the domain offline, and the current status is recorded as “taken offline”.

While the available evidence confirms a crypto‑scam phishing vector, the specific victim‑facing pages, credential collection mechanisms, and any associated command‑and‑control endpoints have not been observed. Defenders should continue to block the domain at perimeter filters, monitor the hosting provider’s IP range for related activity, and consider adding the IP address 46.202.145.163 to reputation lists. Additional scrutiny of any traffic that includes the “Quiz Pippin” title or references to the domain may help uncover related campaigns. Ongoing observation of Hostinger’s infrastructure is recommended, as the provider has been used for similar short‑lived malicious deployments.