sosltsice[.]finance

Analysis of the domain sosltsice.finance indicates that it is currently offline, having been taken down at the time of this report (July 24, 2026). The domain was registered on December 10 2025 through NiceNIC International Group Co., Limited and resolves to the Cloudflare‑owned address 172.67.215.102, which belongs to ASN 13335 in the United States. No SSL certificate is presented for the host, and HTTP requests return the generic page title “This Page Is For Sale”. The lack of a valid TLS certificate and the placeholder page title are consistent with a domain that was likely used for phishing or other malicious activity but is no longer serving payloads.

Reputation data show that the domain has a Gridinsoft trust score of 0 / 100. VirusTotal records indicate that 7 of 95 scanned security vendors flagged the domain, suggesting observable malicious indicators. It appears on a single security blocklist and was cited in one AlienVault OTX pulse, confirming that at least one threat‑intel source has catalogued the site. PhishDestroy has also blocked the domain, providing additional confirmation of its abuse history.

Defenders should continue to block traffic to 172.67.215.102 when associated with the host name sosltsice.finance, add the domain to their internal deny lists, and monitor for any re‑registration or replica infrastructure that might reuse the same naming pattern. Given the Cloudflare front‑end, any future hosting could again mask malicious payloads, so threat‑intel feeds should be queried regularly for updates. Because the site is presently offline, immediate remediation is limited to preventative controls; investigators should retain the observed indicators (creation date, registrar, IP, nameservers, and the 7/95 detection count) for correlation with future incidents.