{"report_id":"69dd1431-8712-4536-8e9f-94d48326a296","version":0,"status":"done","tags":[],"date":"2026-10-11T09:40:05Z","url":{"schema":"http","addr":"solflare-wal.com/","fqdn":"solflare-wal.com","domain":"solflare-wal.com","tld":"com"},"ip":{"addr":"194.238.57.99","port":0,"asn":198550,"as":"Node Host Limited","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"http","addr":"solflare-wal.com/","fqdn":"solflare-wal.com","domain":"solflare-wal.com","tld":"com"},"title":"404 - Page Not Found","dom":{"size":901,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (901), with no line terminators","md5":"ea4804c058d5b6203bd2924a358bc12c","sha1":"9ded792038a459930dbed078f7b3ff449dfbdaec","sha256":"2da6b7b9316913b0a3fe3ee6366c4756ac3dbdbb2d1b5ca617311bbec1475aee","sha512":"45b6f7b13bb55ee519a8b3f9c27bb54a5e21af345839c6016eb1561c36cbec48c79dc0a11941168513f2dfb8cd1ac390efd1155d3e1de35a32a7ab1d4d60ff0b","ssdeep":"","tlshash":"db11887a4381241cfa2344f9f661336870446c179563de54e98ab758c0d515b666230d","dom_hash":"domhash7d4c5416d4b663491a2db14326bebbb7","first_seen":"2026-08-12T14:59:55.923842Z","last_seen":"2026-10-11T09:40:11.044609Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"solflare-wal.com/","fqdn":"solflare-wal.com","domain":"solflare-wal.com","tld":"com"},"ip":{"addr":"194.238.57.99","port":0,"asn":198550,"as":"Node Host Limited","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T09:40:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"solflare-wal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"solflare-wal.com","ip":{"addr":"194.238.57.99","port":80,"asn":5503,"as":"RM Education Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-08-09","domain_rank":0,"first_seen":"2026-10-11T09:40:06.287875Z","last_seen":"2026-10-11T09:40:06.287875Z","alert_count":3,"request_count":3,"received_data":70584,"sent_data":1306,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"solflare-wal.com/","fqdn":"solflare-wal.com","domain":"solflare-wal.com","tld":"com"},"ip":{"addr":"194.238.57.99","port":80,"asn":5503,"as":"RM Education Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T09:39:02.196Z","timestamp":1791711542196,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: solflare-wal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 09:39:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\ntransfer-encoding: chunked\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":916,"size_decoded":745,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (916), with no line terminators","md5":"1b9baf6ea3d50853b3c4e44451ef46fc","sha1":"5b153e03f1929d77858124627a808279faad960d","sha256":"885d543d3988b7b440d2c6508c62e0a035a595200f7750863604afa9631009ff","sha512":"5040e6eb3c941075f456bd18b4e0ec5669608949a4059028bc2c69a2f4498643b447a73f58255611d1fa31c16c1ac60d574cdd61da120aa7fe654090f54c28e1","ssdeep":"","tlshash":"e011c87a4381201cfe2350f8f6a0336830486d139463cf54e9cabb58c0d515b266330d","first_seen":"2026-08-12T14:59:55.924952Z","last_seen":"2026-10-11T09:40:11.054449Z","times_seen":5,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":3,"connect":42,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"solflare-wal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"solflare-wal.com/favicon.ico","fqdn":"solflare-wal.com","domain":"solflare-wal.com","tld":"com"},"ip":{"addr":"194.238.57.99","port":80,"asn":5503,"as":"RM Education Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://solflare-wal.com/","date":"2026-10-11T09:39:02.394Z","timestamp":1791711542394,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: solflare-wal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://solflare-wal.com/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 09:39:02 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 68174\r\nlast-modified: Mon, 10 Aug 2026 04:43:49 GMT\r\netag: \"6a795705-10a4e\"\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68174,"size_decoded":68388,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-127, 32 bits/pixel","md5":"5a48ec934ac6cde72bed528846cc7738","sha1":"036cad92c9b44242f888a8f0c0c569292905457e","sha256":"b12a18d290cd9c0755b3067883664bfc2be4a089706c944dbc45bd9c77bcf406","sha512":"341c0e4ad0e50b846449b4f7edfe5e8f524f28c612962a092cc3a5d866f7a1b12e0c42ade2a7770c8e8b6583f40eae85df0f3d6103817b614ba099d6a8f8ff6b","ssdeep":"96:NRTwpOCAh2xD7BRox+OfrzDKs2t24hhXGKSL9EDef+:NpIJ","tlshash":"2463bad6a640d3cac19179f4cea996fa19f48d67fc644363290e7eabfc358c59933002","first_seen":"2025-03-26T18:19:46.372597Z","last_seen":"2026-10-11T09:40:11.061207Z","times_seen":34,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"solflare-wal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solflare-wal.com/","fqdn":"solflare-wal.com","domain":"solflare-wal.com","tld":"com"},"ip":{"addr":"194.238.57.99","port":443,"asn":5503,"as":"RM Education Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T09:39:01.744Z","timestamp":1791711541744,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"solflare-wal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 04:10:09 GMT","end":"Sun, 08 Nov 2026 04:10:08 GMT"},"fingerprint":{"sha1":"55:C9:B2:6B:BE:D1:E9:EA:AD:0B:D5:28:60:0D:34:73:A8:D1:D5:C5","sha256":"16:8B:75:22:BC:94:08:0C:89:E8:BC:DA:E6:39:DD:D9:07:52:42:62:54:D2:13:8C:E0:23:9F:77:34:48:BC:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: solflare-wal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 09:39:02 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":916,"size_decoded":769,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (916), with no line terminators","md5":"1b9baf6ea3d50853b3c4e44451ef46fc","sha1":"5b153e03f1929d77858124627a808279faad960d","sha256":"885d543d3988b7b440d2c6508c62e0a035a595200f7750863604afa9631009ff","sha512":"5040e6eb3c941075f456bd18b4e0ec5669608949a4059028bc2c69a2f4498643b447a73f58255611d1fa31c16c1ac60d574cdd61da120aa7fe654090f54c28e1","ssdeep":"","tlshash":"e011c87a4381201cfe2350f8f6a0336830486d139463cf54e9cabb58c0d515b266330d","first_seen":"2026-08-12T14:59:55.924952Z","last_seen":"2026-10-11T09:40:11.054449Z","times_seen":5,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":235,"connect":15,"send":0,"wait":39,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"solflare-wal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}