solstice[.]now

This domain, solstice.now, is flagged as an active credential theft phishing domain. The site presents itself under the title 'MeatLess.io - Plant-Powered Future | Coming Soon,' a deceptive landing page likely designed to harvest login credentials or personal information from visitors. The threat is classified as credential theft due to the domain's association with phishing campaigns that mimic legitimate services to trick users into entering sensitive data. The use of a generic 'coming soon' page suggests the attacker may be preparing or rotating phishing lures, making it a high-risk target for anyone reaching the domain.

Technical evidence confirms the elevated risk. VirusTotal reports 7 out of 95 security vendors flagging this domain as malicious, indicating broad detection across the security community. The domain is registered through Dynadot LLC and was created on July 16, 2025, making it very recent. It resolves to IP address 63.176.8.218 and uses a Let's Encrypt SSL certificate, which provides a false sense of legitimacy. The domain appears on 1 security blocklist, specifically PhishDestroy, and has a Gridinsoft trust score of 0/100, reinforcing its malicious status. Infrastructure analysis reveals no connection to legitimate plant-based or food services, supporting the phishing classification.

Users who have visited solstice.now should immediately change passwords for any accounts accessed from that domain and enable multi-factor authentication (MFA) where available. Scan devices with updated antivirus software to check for malware or keyloggers. Monitor financial accounts and credit reports for unusual activity. Report the domain to relevant cybersecurity authorities or threat intelligence platforms. Avoid visiting the domain again, as further interaction may lead to additional compromises. The domain remains active, so ongoing vigilance is recommended.