app[.]solsticefi[.]life

The domain app.solsticefi.life was registered on February 21, 2026 and is presently taken offline. DNS resolution points to the address 104.21.1.79, which is hosted within Cloudflare’s network (AS13335) and located in the United States. An SSL certificate identified as "WE1" is presented, consistent with Cloudflare‑issued certificates, indicating the site employed HTTPS before being withdrawn. The page title returned by the server is "Just a moment...", a generic placeholder that provides no insight into the site’s intended content.

Threat intelligence flags the domain as a crypto‑related phishing operation; this classification derives from the recorded scam type of "Crypto Scam" and the presence of the domain on a known phishing blocklist operated by PhishDestroy. VirusTotal analysis shows that seven of ninety‑three scanning engines have marked the domain as malicious, reinforcing the suspicion of illicit activity despite the modest detection count. Reputation services further corroborate the risk: Gridinsoft assigns a trust score of 0 out of 100, and Scamadviser reports a trust score of 1 out of 100, both indicating extreme distrust. The domain appears on a single security blocklist, confirming that at least one defensive feed has already taken action against it.

While the limited data set precludes a detailed description of the phishing payload or the exact cryptocurrency scheme employed, the convergence of low trust scores, multiple vendor detections, and blocklist inclusion presents a clear indication of malicious intent. Defenders should continue to block the IP address 104.21.1.79 and any URLs under app.solsticefi.life, monitor for re‑registration or similar sub‑domains, and update endpoint and email filtering rules to capture attempts that reference this domain.