soldomain[.]top

Analysis of soldomain.top shows a newly registered domain (creation date February 21 2026) that is actively serving content and is classified as a crypto‑related scam. The domain resolves to the Cloudflare‑owned address 188.114.97.3 (AS13335, United States) and is hosted behind Cloudflare services, including Browser Insights and HTTP/3. HTTP requests return status 200, yet the page title returned by the server is "soldomain.top | 522: Connection timed out," indicating a backend timeout condition. The site is listed on four security blocklists—PhishDestroy, MetaMask, ScamSniffer, and SEAL—and carries a Gridinsoft trust score of 0 out of 100, reinforcing its malicious reputation. Registration was performed through Openprovider, and the SSL certificate is identified as WE1. VirusTotal analysis, based on 93 vendor scans, reported no detections, but the absence of alerts does not mitigate the observed risk. Defenders should immediately block the domain at DNS and proxy layers, monitor outbound traffic for connections to the underlying Cloudflare IP, and include the domain in threat‑intel feeds. Ongoing observation is advised to detect any changes in hosting or content that could alter the threat profile.