solstice-finances[.]com

The domain solstice-finances.com was registered on June 30, 2026 through UnstoppableUS4 LLC and is currently resolving to the IPv4 address 45.9.117.57. The authoritative nameservers are ns1.unstoppabledomains.com and ns2.unstoppabledomains.com, indicating use of the Unstoppable Domains hosting platform. Security telemetry shows that three independent blocklists have already listed the domain, and it is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services. VirusTotal scans report that six of ninety‑one AV engines flagged the domain as malicious, reinforcing the suspicion of a phishing operation.

The threat is classified as generic phishing and the domain remains active as of the report date, 3 August 2026. Evidence beyond the infrastructure is limited; no public page title, SSL certificate details, or HTTP response codes have been disclosed, and no Safe Browsing or Open Threat Exchange records are present in the supplied data. Consequently, the precise content and the exact victim‑targeted brand remain unknown, but the infrastructure pattern aligns with recent phishing campaigns that exploit newly‑created domains and disposable hosting services to evade reputation systems. Defenders should immediately add solstice-finances.com to DNS and URL filtering policies, and consider blocking the associated IP address 45.9.117.57 at perimeter devices.

Because the domain uses Unstoppable Domains' name servers, monitoring for additional domains created under the same registrar may uncover related campaigns. Endpoint protection solutions should be updated to include the six VirusTotal detections, and email security gateways should be tuned to flag messages that reference the domain or its URL shorteners. Continuous re‑scanning of the domain on VirusTotal and other sandbox platforms is advised to capture any evolving payloads.