{"report_id":"617049c5-abcf-425c-b0a0-05e0adbc7db8","version":6,"status":"done","tags":[],"date":"2026-02-26T14:36:03Z","url":{"schema":"http","addr":"claim.solanamobile.cv","fqdn":"claim.solanamobile.cv","domain":"solanamobile.cv","tld":"cv"},"ip":{"addr":"195.88.211.130","port":0,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"claim.solanamobile.cv/cgi-sys/suspendedpage.cgi","fqdn":"claim.solanamobile.cv","domain":"solanamobile.cv","tld":"cv"},"title":"Suspended!","dom":{"size":2400,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b6973150edaed7745ffe2ed0a5bfd8d1","sha1":"2db8db3211dc60587c11e2036c3ad632b0f5a031","sha256":"65035bcea39dfc6c36a95fca02102b942aadb198cdc5e28a42b19688acce2b93","sha512":"60db05e35b551234cb0d6d4549c4568c83a25b47b9424cca712ad868fd38ebca33d2b5a2977e14bf4ff44ecc67ed267543ce5d92cf575319afc0f42eea791273","ssdeep":"","tlshash":"6941404b89d30049288396a82f736614775ad01bc28bcc697eccf26ccf866599c7339c","dom_hash":"domhash4dd167d92d6dde02755c65702eef6a0f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claim.solanamobile.cv","fqdn":"claim.solanamobile.cv","domain":"solanamobile.cv","tld":"cv"},"ip":{"addr":"195.88.211.130","port":0,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-02T14:36:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"claim.solanamobile.cv","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"claim.solanamobile.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"claim.solanamobile.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim.solanamobile.cv","ip":{"addr":"195.88.211.130","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-26T14:36:04.029155Z","last_seen":"2026-02-26T14:36:04.029155Z","alert_count":12,"request_count":4,"received_data":11182,"sent_data":1967,"comment":"","tags":null,"fingerprints":null},{"fqdn":"arenhost.id","ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2021-09-17","domain_rank":772081,"first_seen":"2021-09-17T12:03:11Z","last_seen":"2026-02-20T03:19:48.990621Z","alert_count":0,"request_count":1,"received_data":16828,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.solanamobile.cv/cgi-sys/suspendedpage.cgi","fqdn":"claim.solanamobile.cv","domain":"solanamobile.cv","tld":"cv"},"ip":{"addr":"195.88.211.130","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a97aa19024d6ce70f5ddb464ee3b633","sha1":"86501ef191b1ae6607b43cdc91aeb554a9fc0c48","sha256":"12c6aa1e8b7dec73d16a19f3b06daea8813a61663fe2c2791fb43681a96e7412","sha512":"9f8acaebeef3e0f310b26de1cbda61a8ae7a0bd2bef707ca160bf198107c5664a8756ba9961a457da31a3a5e36cf3b93d82c9c469f616c73fbb3a53e7e3db6fd","ssdeep":"","tlshash":"36c0125e002546511ae7aa8937073401a41ab2d73986e867abac97040f0f20aca26aee","size":182,"data":"","first_seen":"2025-09-23T11:51:13.717229Z","last_seen":"2026-03-06T04:35:02.797333Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim.solanamobile.cv/cgi-sys/suspendedpage.cgi","fqdn":"claim.solanamobile.cv","domain":"solanamobile.cv","tld":"cv"},"ip":{"addr":"195.88.211.130","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-26T14:35:43.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.solanamobile.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:50:46 GMT","end":"Fri, 22 May 2026 16:50:45 GMT"},"fingerprint":{"sha1":"B0:AE:51:6A:F6:F7:6D:11:D3:EE:DB:A0:A2:4E:B5:26:E6:AB:9A:CE","sha256":"99:CB:A1:52:32:73:9F:02:CC:C1:3B:E7:26:E4:D9:0F:0F:A9:24:68:70:CC:8A:50:FF:D0:47:1C:80:B4:79:57"}}},"request":{"raw":"GET /cgi-sys/suspendedpage.cgi HTTP/1.1\r\nHost: claim.solanamobile.cv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Feb 2026 14:35:43 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2518,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"aa0c3f07b752cbee2f385177ef2f289d","sha1":"30fb8072b94eaf7127a1905c6f763a93ab1cdca2","sha256":"1926fb75be8fd093dc08f72f5eba50d893682e029c2e40887923f2cab44b94d0","sha512":"ecb14e554e1a29929dafc16fa0e7d4d9cd671eeb6599d4b04a362ab102f18c35fa7953e7c79a130670e02f78408b8ba905f39e5db7354c3a5981ecafab102ce9","ssdeep":"","tlshash":"62512316c981180854b393e86f336218fb8b8067838385697edcf22b8fb1519c96379c","first_seen":"2026-02-26T14:36:08.225059Z","last_seen":"2026-02-26T15:36:53.614402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"claim.solanamobile.cv","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"claim.solanamobile.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"claim.solanamobile.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arenhost.id/ArenHost.png","fqdn":"arenhost.id","domain":"arenhost.id","tld":"id"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.solanamobile.cv/cgi-sys/suspendedpage.cgi","date":"2026-02-26T14:35:44.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arenhost.id","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 03:50:52 GMT","end":"Sat, 09 May 2026 03:50:51 GMT"},"fingerprint":{"sha1":"E6:20:69:3A:DC:33:E3:D4:22:96:4D:49:55:89:08:1D:6E:18:6B:2A","sha256":"A3:7B:8E:83:D3:CF:19:FC:67:85:BC:31:08:0A:52:B2:4E:E8:50:F0:95:F9:02:58:BE:09:57:3B:73:DC:CF:0F"}}},"request":{"raw":"GET /ArenHost.png HTTP/1.1\r\nHost: arenhost.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.solanamobile.cv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Feb 2026 14:35:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15874\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 3680895\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=25600000\r\netag: \"699e5678-3e02\"\r\nlast-modified: Wed, 25 Feb 2026 01:55:04 GMT\r\ncdn-storageserver: DE-755\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 728\r\nperma-cache: HIT\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/25/2026 08:30:15\r\ncdn-edgestorageid: 725\r\ncdn-requestid: 9b1ac6741553d20457b3a6a1367c40aa\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d95cd46830fc13d19e6329d9ef06c7ed","sha1":"89c6acecbf181d14f2542ecef52b71eb6a337fd5","sha256":"1e460026e606c63b6a993615cd0f9116847df8372314c1f44296d36a98890029","sha512":"0c01d16e45372e4ab3e9bf16156b09246ec1c8ab2a3fdefa06a35c074550c0272f070c8060070bfe5ca2150fdffb75584f55f9c7ae8be4183307df0da7775d7e","ssdeep":"384:AYNg7WphvwzsFHuC/YaOk61SL9NvVAus8WHPR:AYySpdwz6boQtcvR","tlshash":"9262d1faea6ff3f5df519935fda353104da3f078d711a28306285798425c0c638163a6","first_seen":"2026-02-21T05:07:59.952611Z","last_seen":"2026-03-06T04:35:02.794902Z","times_seen":7,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":63,"dns":39,"connect":7,"send":0,"wait":9,"receive":6,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.solanamobile.cv/favicon.ico","fqdn":"claim.solanamobile.cv","domain":"solanamobile.cv","tld":"cv"},"ip":{"addr":"195.88.211.130","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.solanamobile.cv/cgi-sys/suspendedpage.cgi","date":"2026-02-26T14:35:44.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.solanamobile.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:50:46 GMT","end":"Fri, 22 May 2026 16:50:45 GMT"},"fingerprint":{"sha1":"B0:AE:51:6A:F6:F7:6D:11:D3:EE:DB:A0:A2:4E:B5:26:E6:AB:9A:CE","sha256":"99:CB:A1:52:32:73:9F:02:CC:C1:3B:E7:26:E4:D9:0F:0F:A9:24:68:70:CC:8A:50:FF:D0:47:1C:80:B4:79:57"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim.solanamobile.cv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.solanamobile.cv/cgi-sys/suspendedpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html\r\ncontent-length: 771\r\ndate: Thu, 26 Feb 2026 14:35:44 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://claim.solanamobile.cv/cgi-sys/suspendedpage.cgi\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":2518,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"claim.solanamobile.cv","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"claim.solanamobile.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"claim.solanamobile.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.solanamobile.cv/cgi-sys/suspendedpage.cgi","fqdn":"claim.solanamobile.cv","domain":"solanamobile.cv","tld":"cv"},"ip":{"addr":"195.88.211.130","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.solanamobile.cv/cgi-sys/suspendedpage.cgi","date":"2026-02-26T14:35:44.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.solanamobile.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:50:46 GMT","end":"Fri, 22 May 2026 16:50:45 GMT"},"fingerprint":{"sha1":"B0:AE:51:6A:F6:F7:6D:11:D3:EE:DB:A0:A2:4E:B5:26:E6:AB:9A:CE","sha256":"99:CB:A1:52:32:73:9F:02:CC:C1:3B:E7:26:E4:D9:0F:0F:A9:24:68:70:CC:8A:50:FF:D0:47:1C:80:B4:79:57"}}},"request":{"raw":"GET /cgi-sys/suspendedpage.cgi HTTP/1.1\r\nHost: claim.solanamobile.cv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.solanamobile.cv/cgi-sys/suspendedpage.cgi\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Feb 2026 14:35:44 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2518,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"aa0c3f07b752cbee2f385177ef2f289d","sha1":"30fb8072b94eaf7127a1905c6f763a93ab1cdca2","sha256":"1926fb75be8fd093dc08f72f5eba50d893682e029c2e40887923f2cab44b94d0","sha512":"ecb14e554e1a29929dafc16fa0e7d4d9cd671eeb6599d4b04a362ab102f18c35fa7953e7c79a130670e02f78408b8ba905f39e5db7354c3a5981ecafab102ce9","ssdeep":"","tlshash":"62512316c981180854b393e86f336218fb8b8067838385697edcf22b8fb1519c96379c","first_seen":"2026-02-26T14:36:08.225059Z","last_seen":"2026-02-26T15:36:53.614402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":509,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"claim.solanamobile.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"claim.solanamobile.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"claim.solanamobile.cv","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.solanamobile.cv/","fqdn":"claim.solanamobile.cv","domain":"solanamobile.cv","tld":"cv"},"ip":{"addr":"195.88.211.130","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-26T14:35:42.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.claim.solanamobile.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:50:46 GMT","end":"Fri, 22 May 2026 16:50:45 GMT"},"fingerprint":{"sha1":"B0:AE:51:6A:F6:F7:6D:11:D3:EE:DB:A0:A2:4E:B5:26:E6:AB:9A:CE","sha256":"99:CB:A1:52:32:73:9F:02:CC:C1:3B:E7:26:E4:D9:0F:0F:A9:24:68:70:CC:8A:50:FF:D0:47:1C:80:B4:79:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.solanamobile.cv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html\r\ncontent-length: 771\r\ndate: Thu, 26 Feb 2026 14:35:43 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://claim.solanamobile.cv/cgi-sys/suspendedpage.cgi\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":2518,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":1808,"timings":{"blocked":768,"dns":215,"connect":271,"send":0,"wait":272,"receive":0,"ssl":278},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"claim.solanamobile.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"claim.solanamobile.cv","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"claim.solanamobile.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}