sol-anal[.]pages[.]dev

Analysis of the domain sol-anal.pages.dev indicates it is an active phishing site hosted on Cloudflare Pages infrastructure. The domain was registered on October 23, 2024, and currently resolves to the IP address 172.66.44.247. As of July 29, 2026, the domain appears on one security blocklist, specifically PhishDestroy, which classifies it as malicious. VirusTotal data shows that 3 out of 91 security vendors have flagged this domain, though the specific detection signatures or classifications are not provided in available intelligence.

Infrastructure analysis reveals the domain is served through Cloudflare Pages, a platform commonly used for static site hosting but also exploited for phishing due to its free tier and ease of deployment. The IP address 172.66.44.247 is part of Cloudflare's network, which often obscures the true origin of malicious content. No additional details regarding the Autonomous System Number (ASN), hosting country, or SSL certificate anomalies are available at this time. The exact nature of the phishing content remains unconfirmed, as no page title, brand target, or phishing kit details have been provided.

Defenders are advised to treat this domain as high-risk and implement blocking measures at the DNS or proxy level. Given the domain's presence on a security blocklist and detection by multiple vendors, organizations should prioritize monitoring for connections to 172.66.44.247 or any subdomains of sol-anal.pages.dev. Further analysis, including sandbox execution or packet capture, may be required to determine the specific payload or credential harvesting mechanism in use.