{"report_id":"f0fde9ba-5b63-4f53-baf3-58907c4a8822","version":6,"status":"done","tags":[],"date":"2026-05-14T18:53:25Z","url":{"schema":"https","addr":"portal-solstice.finance","fqdn":"portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.1.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.portal-solstice.finance/","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"title":"SOLSTICE | FLARES SEASON 1 REALLOCATION","dom":{"size":24250,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (328)","md5":"c006b1a4675dc706ae930dbd730533a2","sha1":"8a05090c8415bce098cae4dcdc51a4ba22b3a2c1","sha256":"b4c698f1846e2aacc0c86a26a57a773166adeb8e4ce0de87c432015975ecb364","sha512":"60039c17da5771b480af6838bafa101817527ed569c0054a5266583dc0f936e319260129b7e4cef304bf1d4b93bfd69285a18ea6bd78cec770918818e707503b","ssdeep":"384:VagFd2X7HdOamFtFAF60R7F6ZOQh81GEaG:VVFdJFtFAF6IYFy","tlshash":"f2b2b98656f32229281393bc1bbb63a53731d103c50acd7d7fcd22948f866d99da3798","dom_hash":"domhashdac3606a34469b3aea20eff3ea683ce8","first_seen":"2026-03-06T11:16:05.377552Z","last_seen":"2026-06-06T23:47:52.456219Z","times_seen":84,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"portal-solstice.finance","fqdn":"portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.1.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-18T18:53:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"portal-solstice.finance","ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-14T18:53:29.953846Z","last_seen":"2026-05-14T18:53:29.953846Z","alert_count":2,"request_count":1,"received_data":55558,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"backend-main-proud-frost-1362.fly.dev","ip":{"addr":"66.241.125.20","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"domain_registered":"2019-03-01","domain_rank":0,"first_seen":"2026-03-28T06:26:38.625113Z","last_seen":"2026-05-04T02:45:44.147901Z","alert_count":0,"request_count":2,"received_data":768,"sent_data":1123,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"play-lh.googleusercontent.com","ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":3758,"first_seen":"2019-09-30T06:57:53Z","last_seen":"2026-05-14T10:02:37.259538Z","alert_count":0,"request_count":1,"received_data":7386,"sent_data":531,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-05-11T00:46:10.621278Z","alert_count":0,"request_count":1,"received_data":827312,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.portal-solstice.finance","ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-14T18:53:29.945154Z","last_seen":"2026-05-14T18:53:29.945154Z","alert_count":34,"request_count":17,"received_data":1179990,"sent_data":8348,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"solstice.finance","ip":{"addr":"104.26.8.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-10","domain_rank":0,"first_seen":"2025-12-18T13:25:56.092297Z","last_seen":"2026-05-13T12:56:33.693142Z","alert_count":0,"request_count":1,"received_data":13490,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Storyblok","description":"Storyblok is a headless CMS with a visual editor for developers, marketers and content editors. Storyblok helps your team to manage content and digital experiences for every use-case from corporate websites, ecommerce, helpdesks, mobile apps, screen displays, and more.","website":"https://www.storyblok.com","common_platform_enumeration":"","icon":"Storyblok.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}]},{"fqdn":"iconic.dynamic-static-assets.com","ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":1804516,"first_seen":"2023-03-28T18:24:46Z","last_seen":"2026-05-12T18:01:48.226931Z","alert_count":0,"request_count":3,"received_data":6487765,"sent_data":1410,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"images.ctfassets.net","ip":{"addr":"3.167.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-03-28","domain_rank":23334,"first_seen":"2017-09-20T16:27:05Z","last_seen":"2026-05-14T11:28:02.046594Z","alert_count":0,"request_count":1,"received_data":7690,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ipapi.co","ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-05-13T19:37:08.710277Z","alert_count":0,"request_count":1,"received_data":2500,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.portal-solstice.finance/","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d92828d26859aa436eadb428a544eaaa","sha1":"a2e550142bca816d631678c6fa2112834445e6ac","sha256":"1227b6e0f49f326dcde7f585c5296cc9033a6025a0e00507610196bc1f288e55","sha512":"b18894a58c4c7dee2d34cabaf88dcfca748dd5b5c33d4cb7247b7ab557f41a0034e960fe23a2246f7edcfec65e0eaf1c3ebba9118e761cb4bb520d3ac8444df6","ssdeep":"96:d1bqtjG7uqt8qeaiM9qi2hWaIV/ij2gvsZ6is2uiSV76Sq8FbbN4x7tlpkwDrtor:KtqbfIPWaIV/ij2gvsZ6is2uigeS/dNf","tlshash":"a6b1226eaaa301746173353d57af515837b5a0033804cd303dac8280df78d6699aafdd","size":5405,"data":"","first_seen":"2026-05-14T18:53:39.405935Z","last_seen":"2026-05-14T18:53:39.405935Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/frame.html","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"fae289f346b17494d1f7974148a2b3b8","sha1":"6ba1f95910f831b79fe088608359d97804423607","sha256":"5ccba7eef5fc9c813066b463d337db933274a4c13007023e1f074c37e920d410","sha512":"74bf59474c06c3e6801c5d17b87d9eecbf090167804a4be6105ba64f5a4a0b010aebe5842a393d0cf1afc10fe6016b05e44ec2679f925b6891e45aa8a7801daa","ssdeep":"","tlshash":"352132b70441757afe7b3e1b7a8e788b1aa7eb4471cbe6e5c35675285c22b4004e0278","size":1230,"data":"","first_seen":"2025-07-26T22:19:45.18074Z","last_seen":"2026-08-16T07:34:29.636172Z","times_seen":2191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/frame.html","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"b1715833ba93c4393805ea3699bee544","sha1":"c75447b548e0f87ab4302a16910187b3e4dcad5b","sha256":"e443a4d661a95942ecef048944f3b2a62a58d92b04c31341ce45715b97ad202c","sha512":"d9aab6ad3a575c4ace302f30a084361d8d8edfc43b0f99c260b05ea2773fc61eeb306628905ec8b45660f3e2ff145c3be70f76a18d279b2c0be0ac9734e56f2e","ssdeep":"","tlshash":"41f0e2a438c2f163a6fd1583bc092d8d313594f28a8862039fadb48c148c603c6449a8","size":461,"data":"","first_seen":"2025-07-26T22:19:45.160401Z","last_seen":"2026-08-16T07:34:29.631904Z","times_seen":2203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/frame.html","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db2c53c504ece5f3f810101597844940","sha1":"c0b597e24272c17788fbf98c491f3f484171c842","sha256":"3193c6b60d3b1917f04a6620f4dbf9b8f64a5a6130ba90cfc3b3544e3549aad0","sha512":"193818b857a72e2dadc6362f57ded26a0933304cc412475e800ce4a59dd5a01a55c35075128b85f2708fcc086eab9960a6ea2e95513526b50c76e6c45c4e189e","ssdeep":"","tlshash":"4e11ba0ae5e302a224fb573e5baf31602a33402bb108e454bc4da3005f1ce0a4727eed","size":1101,"data":"","first_seen":"2026-02-17T22:03:10.089694Z","last_seen":"2026-06-06T23:47:52.516321Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/frame.html","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f37ee6383942a788cf395bb483f6f857","sha1":"da8d424ee1e5c1aec88bbfc4a933a160cbbf4282","sha256":"6bc094d1288e87d747e06f394a7f5374bd05827c159190bf6f466e201aa85be9","sha512":"175f6b2e1ac409c78182098cec45c4c87087995f995e4c84143e32a4f9285de88e32f31657ec252afb9aac692e33f04612dded28b88a3d6aca20f43adfa9f627","ssdeep":"","tlshash":"121132702f84a063f4fd9e02d9147d520a3674c1b14cb383cf9af6195d383d18aa51ed","size":1000,"data":"","first_seen":"2026-05-14T18:53:39.41028Z","last_seen":"2026-05-17T06:22:35.509756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/frame.html","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"dc255c5d392163ad8215ec8cafa0b025","sha1":"3eb1482fde700de5f958554bd69c16219bcd8fab","sha256":"b828a828f278b2c641030510f77865bafaef57e4bb4945825b307cdfd5e99d6f","sha512":"02074148991fc0ad87f5abfc8846d19d61018f426fe956b0c2a9e175260840740208fff2081a17cc3d44027d03fc0d205c68a2ad961a357dec301383b4e3c186","ssdeep":"384:2ecE1WVsgFkqvQSS/KkfwTvvFDXaDs51ynDpwK0UKDF527AZWFTw5R8:JcE1Dt/KCwt7ynGJlZ5qAZWFTw5R8","tlshash":"06b26ce26192e03187cf77a1923f1c17a2bf1990c50ce5fe92719a9865f21964ed0ac9","size":24273,"data":"","first_seen":"2025-07-26T22:19:45.197843Z","last_seen":"2026-08-16T07:34:29.629875Z","times_seen":2093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@solana/web3.js@1.95.3/lib/index.iife.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c522aabdd1928f3bae7329e0deee54a2","sha1":"9fda248c8847a88cfce0b7a7b3701a59e7cf704f","sha256":"c040905c5492b70511a436ccc022e8cf08b53f92df3fac0475339be11e77c974","sha512":"b0c5aedcc21f6ef99d986d8cdb2ec332dfcc5e74ecafeef3c208fe594fdcb2844377988ffde2f8392ae275b21c14e3ab99595b990b7aefbbef0a52c18d57f8ec","ssdeep":"6144:MY7QATeuOTH/z2ZQ38AAi4Wk6KigSgxbH48OsQ7tSC9MF9+NuykcX36NM6bIO7e5:qAaN4Wk6KigSp9z9MF8qgOqce","tlshash":"1005b545ebe06021ba53726e4f5fb449b734e00b2904cc98bd4d92703f556788bfaee9","size":826457,"data":"","first_seen":"2024-09-07T17:29:16Z","last_seen":"2026-08-08T18:49:00.464246Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/frame.html","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"5fa408b30235725d500d803b2292e3fe","sha1":"2cf59dc4a7c372a1bfa4054ffcfa51d4e5264c28","sha256":"281ad2f76261b173f1ad8be7d3676c497be1641fd6a1306f82c8d99c6850ac65","sha512":"f8c732444c0a47e261d0f005719a6197b2bd41b39d7b8d32ee2f6a165970a4df8d8be224bb6e214e8a9e71cb6ad240c3c5ff0fb3ae44360fb18ad0675fa6b2e0","ssdeep":"","tlshash":"bce0eb0788c92f0bc6c309aac8503c8c8223daf074c09cb2fc24c20389698f9898e77c","size":292,"data":"","first_seen":"2026-05-14T18:53:39.412884Z","last_seen":"2026-05-14T18:53:39.412884Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/frame.html","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d0d936a3e56d5f50dcef38a5e5046284","sha1":"1fb78f846965b288696b9f3bd933a91c3c4f7ef3","sha256":"cd1379b857d0019f7ac736e59872484cdd6cda00d13fbe01e40217d7fbed0971","sha512":"4dc583bbb3f793c64693558172a449a1011ecb8723e4626cf2d7d32d09bd2969913a25d13b9493d3550f295504e24273d67556457e43d8949c52368e4937433f","ssdeep":"","tlshash":"2d9002a9944c1310442619d08056185d8970836113118840008bb9613991034051946c","size":49,"data":"","first_seen":"2025-07-26T22:19:45.151938Z","last_seen":"2026-08-16T07:34:29.630355Z","times_seen":2187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/frame.html","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"390a4b15e6179a4d59ee948c04ee48c0","sha1":"65c43d163b68d19754098cd98da3e99107ef4ff3","sha256":"e19d2226a698725688d44874aae3ad7c59beae017228b6ec6bb67bd4bd788004","sha512":"f4559ee17c23f91080636acb7dd8b886df705ea2fd27a9eb75335fe79b0bf5d9eedf4c15b5f4273d72b38cb7d76b6403fcac8c80dd6a3ed8df7541339e4f331d","ssdeep":"","tlshash":"2911327c4a7ed928e3280d2a04f60e558bf6a37ffc2d96079610b914a1188640d3997e","size":1000,"data":"","first_seen":"2026-05-14T18:53:39.415701Z","last_seen":"2026-05-17T06:22:35.500085Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/frame.html","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a5758d2bc8833f1e9dca6a8c5aeaead0","sha1":"3967e0d20038a9ab67bf2e0cddf22ae87932dc48","sha256":"701110fee739fff5aa5b2629359cdb6620615584b8079e8eba24fc58f9687011","sha512":"3844f28325d07cc6ec9eaf64c7ec7e0cd809de640ec6118f4d70965b3c3d3a477cf7106f40f37756e2ffb47346e83edce009197df7e71f7d9ebfbed43f084266","ssdeep":"768:G2OEyU38GSyr+1YPzx4gp8PVgzKIZXvP1Cao/BqY:GJEy+81yK1YPWPubvc","tlshash":"08c2cf3ace63b60394bb57827c073986873c2247a83d34dd6eb84e1095c968a5b8757c","size":26983,"data":"","first_seen":"2025-07-26T22:19:45.20413Z","last_seen":"2026-08-16T07:34:29.637059Z","times_seen":2106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/frame.html","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"77d334ec1503598e7b7910ac71a45742","sha1":"9f544756f3b72f308fe66143cc604841e9b9469e","sha256":"27b06f8e84cefe8d17f1f58b560b56fcbf4a33bf6dfb995bae7b4889ee696bfc","sha512":"d71526527274c1544c3e464fafca3c1c6fbcbb0606b759d81e3855c13f472d27c19714c168f0e79c3fd901329b05ca830ee8e480f92e3cd58ab66f6175010fac","ssdeep":"768:+bT5XMVbcrjLMJgZREVa9j4va9BTY2wWCA1DyRDmgR61/geDNKEfhds3vw+au0Un:+aVcSgZREVaZ4KThbtAc1/ge0RFH+gb","tlshash":"2593b51660f7213611b7613a1f932121b63b6e036504e9687f5c93584fa8e8ec9b37fe","size":94975,"data":"","first_seen":"2026-05-14T18:53:39.418155Z","last_seen":"2026-05-17T06:22:35.500876Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"576c3ef713beeb832ae5250409dee084","sha1":"05c52ed9a9c1ecec3f6a41f58b6db2b638f93132","sha256":"38164cfdbe74dff34a20a6e29f31de8caf028a0b386a24943cb9e6b28d6ab57b","sha512":"88a515267429988ea6e3697eb1bbce1702027faba7d4344b63dfbf3934374dfd72051ff3cc30d83e6afbca424cd6586433e46c7d29aa13746b98fb696088fd93","ssdeep":"1536:cVZxPeLYiZaVbg3RmVar4KT3btA+1/gQ0Ym1:8ZxPeLRKbDwThgQ0l","tlshash":"f0930a1621f3213a1173116a1fa72275b6376a036109d86c3f8c93588f59f8addb37ee","size":91205,"data":"","first_seen":"2026-05-14T18:53:39.41983Z","last_seen":"2026-05-17T06:22:43.250491Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.portal-solstice.finance/a84ecebd8cba5abe.css","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /a84ecebd8cba5abe.css HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22885\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"a84ecebd8cba5abe.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: W/\"84e56fb3009619f2fff902f3478829f2\"\r\nlast-modified: Thu, 14 May 2026 12:31:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::x858c-1778784782158-31ddc4ce59bd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102824,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (63243)","md5":"84e56fb3009619f2fff902f3478829f2","sha1":"fe25c77a54c4982a4dffec5e88f3d4e0d285cec9","sha256":"fbca233767f50cecd9a600244da05ff3d716c35713e260bdbb200f2efd6efce0","sha512":"c9fd562549897fec1126ef6e8de565e6589d206859326497b050aba99675ec9b994d687b3ce4001f521ec7f74d823b9bfbe74906fb3a8ded2ed70f1fbc5ca588","ssdeep":"3072:GHY9Ph9YgBHvbm+vq1UVK0lFn1KxErYItprZSO2/1WhMdXiG2BI5uJcC:GHY1h9YgBHvbm+vq1UVK0lFn1KxErYIj","tlshash":"e9a3c72ea725213f7c3b81f1c2f4b99c310ab280df7a16f5fd5251219ed27f6192a624","first_seen":"2026-05-13T12:56:39.118269Z","last_seen":"2026-07-18T17:50:26.126579Z","times_seen":11,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/81e14657b7ad5efb.css","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /81e14657b7ad5efb.css HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22885\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"81e14657b7ad5efb.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: W/\"2c824d4f73d9a35d279fab7a37c3eec3\"\r\nlast-modified: Thu, 14 May 2026 12:31:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::mcrvn-1778784782158-d9197e6afac6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":95790,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (63217)","md5":"2c824d4f73d9a35d279fab7a37c3eec3","sha1":"b1f9086cf5e41e53ee53c2d3accdb49c641078d1","sha256":"af4fb5fe1c3f3beb7304d25f8509462a2bfb936eb85abdc68190f8dbc46f4a6b","sha512":"eef2a0fe9ef78d9fe574683433cede277f0716cac81eade700f6bb56f37fedeb250dd2c07c9629625080fbfbd10534b6f78831dbefea9574b7462c249a56f754","ssdeep":"1536:cHkCNmgh9YgBHvbm+vq1UVK0lFn1KxErYItKofj4A2ZSO2/1WhMdXiG2BI5uJc9c:cHrPh9YgBHvbm+vq1UVK0lFn1KxErYI4","tlshash":"2093b72eab25213f7c3b84f1c2f4bd9c310ab280df7a16f5fd5251119ed26f6096a624","first_seen":"2026-05-13T12:56:39.145318Z","last_seen":"2026-07-18T17:50:26.122835Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/loader.js","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /loader.js HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22885\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"loader.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: \"e1c569038791c5b780f154a99e79468d\"\r\nlast-modified: Thu, 14 May 2026 12:31:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::hgn4f-1778784782159-c3c6f171f3b9\r\ncontent-length: 788\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":788,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"e1c569038791c5b780f154a99e79468d","sha1":"7f6851895dfac1c96287f0cfbccadcb148ad0c5e","sha256":"df9f72772a413e978066942074c416225f5f89bfe97544955c4d470a78b174c8","sha512":"8a1bc1e517b1bc63832474bd6d52b8424a394209f0de72dbc5f7268601dd83ea11d02b1017acc2df5a781ff9c59e9873da94a596af9b78e66d7282641f789c61","ssdeep":"","tlshash":"2901612f86c59d324f5066260d1cb10bee2dc4b6545fbc503cb8cb4fc2bc0868ea5568","first_seen":"2026-05-14T18:53:39.376916Z","last_seen":"2026-05-14T18:53:39.376916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solstice.finance/favicon_io/apple-touch-icon.png","fqdn":"solstice.finance","domain":"solstice.finance","tld":"finance"},"ip":{"addr":"104.26.8.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"solstice.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 00:13:36 GMT","end":"Mon, 06 Jul 2026 01:13:22 GMT"},"fingerprint":{"sha1":"6C:50:75:D0:87:C5:94:D4:46:BC:50:BE:36:CE:99:DD:37:98:B3:03","sha256":"99:32:62:0D:6F:8C:9B:BC:A6:A7:01:8F:F8:A1:2B:51:ED:9F:6F:0C:06:0D:13:27:EF:69:F7:88:AC:D1:DB:A0"}}},"request":{"raw":"GET /favicon_io/apple-touch-icon.png HTTP/1.1\r\nHost: solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 12034\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://a.storyblok.com https://img2.storyblok.io data: https:; font-src 'self' https://fonts.gstatic.com https: data: 'self' webpack:; frame-ancestors 'self' https://app.storyblok.com; object-src 'none'; base-uri 'self'; form-action 'self';\r\nx-xss-protection: 0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Mar 2026 22:32:18 GMT\r\netag: W/\"2f02-19ce9543d50\"\r\nx-cloud-trace-context: f1abafa59e61da349eef59cb8499c61d\r\nserver: cloudflare\r\nage: 339185\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qR%2BbbOCa62dKu%2Fp2Abe2etnOKn7k8fO%2F4e29chUT8FegHEmI7Leb2wvj1vpgP7urQb%2F1k4n%2FUr4iwlCeJHBkXe1C0Uw9nPy7vuCtJYSG%2FT2BWlwvjW1PgI9JgwGJzDI3JoY%3D\"}]}\r\ncf-ray: 9fbc1a7b587e56ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Storyblok","description":"Storyblok is a headless CMS with a visual editor for developers, marketers and content editors. Storyblok helps your team to manage content and digital experiences for every use-case from corporate websites, ecommerce, helpdesks, mobile apps, screen displays, and more.","website":"https://www.storyblok.com","common_platform_enumeration":"","icon":"Storyblok.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":12034,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"f24b266077219176e1f95a0e7e231f84","sha1":"2878aa8bb72479975c5b95a2c46dd4480de50afe","sha256":"546819d7e29f85808df22e8a6d59f4f0b9fbc83c9ad1ca775f92bde83d824890","sha512":"3f2adb016e572556f39398cc2018c914fc382e43590acff5ab93d0628eba72a0e72748730b6c9333206c41a3ef69c23c1c2844bcd8fae21975bca6bb9a8c1183","ssdeep":"192:45FXRKg+iGt1+akD6Y9034fIW5WaMnszscN+hAcaGibEeMbQ8UbQYNOsiroBtcl:4TsdttwakD5yxW5gnszscFWGybruW","tlshash":"1742b0d1be5263d11b8bc37bd04819ec23e62e87479352898835dd99ca58f5773d80ec","first_seen":"2025-12-18T13:26:02.135198Z","last_seen":"2026-05-25T10:12:54.792478Z","times_seen":11,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":27,"connect":1,"send":0,"wait":33,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg#backpack","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.portal-solstice.finance/frame.html","date":"2026-05-14T18:53:02.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\ncontent-type: image/svg+xml\r\nset-cookie: __cf_bm=G2GVJ4hdKxTdxSPQvjIii5Ait3c6Gx_RyRtT7IRRut8-1778784782.80049-1.0.1.1-7n24AWhWwRw5Qmrd0rLQe6V82e_GsHIfxqNzt7kiWztzzsm6jbfO2W_mAI2QQpB5qr6Wnkv38dgqgWBIiLLgV8nfaRukeBJQqtxO5dCExYQmJMEAEL78hJy7bMwfp3dC; HttpOnly; SameSite=None; Secure; Path=/; Domain=dynamic-static-assets.com; Expires=Thu, 14 May 2026 19:23:02 GMT\r\nlast-modified: Mon, 11 May 2026 12:51:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 280872\r\nexpires: Thu, 14 May 2026 19:03:02 GMT\r\nx-static-request-id: RB4W72V9SFFT87VG\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"6f9da2559de1cb4b6920bb5083443d26\"\r\ncontent-encoding: br\r\ncf-ray: 9fbc1a7c7f8f56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2161659,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34c27e8480ac0a703049366975925116","sha1":"ad565e549815eb4b16e19d0d99608ec14656be15","sha256":"43a596818a7d65db0c43d8db1218035ce4989194642350a07c51afa0bb29de72","sha512":"3e5b2c14c6f22ca853104e908dbf7e1fadfd9fbe50686ed7ac3fa209b6de1da9464de06fd142291e3d88929208ca99d18bf1cb69fbc7d6f023ce911367921673","ssdeep":"12288:8HamqgPQRaujhzJJuDeXNqY8GS8my92nxZiFsO2OsoF5fAF09:0P3ujhzJJuDeXNqY48my9SxZiiOWCf79","tlshash":"342508ba5c1c6b4e766a4d3ddb26307d2e4b70eeb24481dfa9ce72ecc153451e921ca0","first_seen":"2026-05-11T18:20:52.727664Z","last_seen":"2026-05-21T11:18:24.806754Z","times_seen":14,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":69,"dns":6,"connect":2,"send":0,"wait":101,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal-solstice.finance/","fqdn":"portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-14T18:53:01.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Thu, 14 May 2026 18:53:01 GMT\r\nlocation: https://www.portal-solstice.finance/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::ldcwr-1778784781839-8bd20a11e8d8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55230,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":88,"dns":67,"connect":1,"send":0,"wait":11,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/TEG-Medium.ttf","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /TEG-Medium.ttf HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/a84ecebd8cba5abe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22884\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"TEG-Medium.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: W/\"90067429817b60786a2a82de4aec3b46\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::brkkt-1778784782325-852a287c949a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80452,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 26 names, Macintosh, Copyright (c) 2020 by Alfredo Marco Pradil. All rights reserved.TEGMedium1.119;HDCO;TEG-MediumTE","md5":"90067429817b60786a2a82de4aec3b46","sha1":"59834e5d1d1cc6851b45546e1f91379b52885080","sha256":"d7273bc1b904ad04b80f708e1c082c21295d9f35ee9c4c8c1b255725fbcb16b0","sha512":"de6c5637ea351fc0bc977a0675fffe423422633a0941831070ab9f5620beb89bce58b76d0e65c071f4915ce8f0716e1ebc6aed400e30dad37cb166f7a5171010","ssdeep":"1536:LyMiTXfeRexXfRuLslyYvPPV2yGJMiDX2hfdtFDfLl:LR8GOALkbvHV2Xe3XFDjl","tlshash":"62734a06f704ce0fec122e38569597e97376fd90a75f838ba5427d69ecab09c1c83285","first_seen":"2025-12-01T11:20:44.569398Z","last_seen":"2026-07-18T17:43:20.554715Z","times_seen":15,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/permissioned-mint-herov2-bg.jpeg","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /permissioned-mint-herov2-bg.jpeg HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22884\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"permissioned-mint-herov2-bg.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: \"32abc8aa4407bf50628dad041e0af315\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::mcrvn-1778784782410-831e0b796fdf\r\ncontent-length: 61434\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61434,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 3840x1928, components 3","md5":"32abc8aa4407bf50628dad041e0af315","sha1":"51aac4e1cafdd856f1b9c743e4559aa250b92f0a","sha256":"b19a0748a41381be06545f4f3f7b53fba75296d4abcca7c613755190d2d9e80a","sha512":"0f3de9623c9dcf4a167dd5af6fe8a85cdbcf3c5ed6aa52683ab448a69fe3f5c790455cab73b472dbff36c089f23bbb12d1e04bd0f6f18611117cc3bd7ee2c755","ssdeep":"1536:CRLQ+x4n4KWYb3y/2hTE1uDTaatDHZNyi:qLQ+q4/YbYTkXNyi","tlshash":"b5538e13eb41a35bc16c237099cb27163b1b15fbe7dd850796c94061e8ba3a87cca7e1","first_seen":"2026-04-21T11:19:53.4201Z","last_seen":"2026-07-18T17:43:20.538224Z","times_seen":11,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/o10es7wu5gm1/TWlW6aoAXPX7yUg5ShsZ0/c02522911b90b766eb8eef709e42b8eb/WalletLogo.png?fm=avif\u0026w=640\u0026h=640\u0026q=65","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"3.167.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.portal-solstice.finance/frame.html","date":"2026-05-14T18:53:02.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /o10es7wu5gm1/TWlW6aoAXPX7yUg5ShsZ0/c02522911b90b766eb8eef709e42b8eb/WalletLogo.png?fm=avif\u0026w=640\u0026h=640\u0026q=65 HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 7176\r\netag: \"b3fde880556f8a20e9b5ade67abae28c\"\r\nlast-modified: Thu, 23 Apr 2026 03:05:24 GMT\r\ndate: Thu, 14 May 2026 03:49:58 GMT\r\ncache-control: max-age=31536000\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: NEvEszK9ZTGCCaAGAH6sp9jALsS4ECaaekDUFkPe_2vaFc4p5X6sMg==\r\nage: 54184\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7176,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b3fde880556f8a20e9b5ade67abae28c","sha1":"f24a055a5aa5fe7457c803e2b8a0bd302c4ba28a","sha256":"c7cb8b282f0001285e407c6cf7ed2e58a7177ff58aee8affb5b317452f60279e","sha512":"fdb8bbbd63826f25ca96f0d40c4bab7e56c111bd6432f356fdba72e07167e58fadfc4c899077c01519db8ce46c8019d63373793a0d3006faf622b5405bde212d","ssdeep":"192:+zCZNwhQ5hC+J8pBgRwgjrls4ZCtVWBrEZkmW5B:SfKzC+igHjrls4MtVWBoKR","tlshash":"c3e18cfbb3eae952cb5af3322961400033b74d3623927d0d373819b1d4581a3d15aa9d","first_seen":"2025-10-22T11:06:54.149612Z","last_seen":"2026-08-16T04:33:07.889946Z","times_seen":422,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":77,"dns":66,"connect":1,"send":0,"wait":3,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg#phantom","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.portal-solstice.finance/frame.html","date":"2026-05-14T18:53:02.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\ncontent-type: image/svg+xml\r\nset-cookie: __cf_bm=J82vsRmfcnqtm1_.0.dqZNx05VXU5n23SHnAioNPICw-1778784782.7909343-1.0.1.1-V5CckgQxhuhrjEF.2dzO0uCfrcUY7hpct.BYPAcOZRe8ceUYPuT2uqmdWXtGzXg8sCUzfRkOOVaAEhVhRSxxK0e90qGi7bP5lMzVLG5crD0OIBpb20w87yJMtQYySyI0; HttpOnly; SameSite=None; Secure; Path=/; Domain=dynamic-static-assets.com; Expires=Thu, 14 May 2026 19:23:02 GMT\r\nlast-modified: Mon, 11 May 2026 12:51:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 280872\r\nexpires: Thu, 14 May 2026 19:03:02 GMT\r\nx-static-request-id: RB4W72V9SFFT87VG\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"6f9da2559de1cb4b6920bb5083443d26\"\r\ncontent-encoding: br\r\ncf-ray: 9fbc1a7c7f8156a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2161659,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34c27e8480ac0a703049366975925116","sha1":"ad565e549815eb4b16e19d0d99608ec14656be15","sha256":"43a596818a7d65db0c43d8db1218035ce4989194642350a07c51afa0bb29de72","sha512":"3e5b2c14c6f22ca853104e908dbf7e1fadfd9fbe50686ed7ac3fa209b6de1da9464de06fd142291e3d88929208ca99d18bf1cb69fbc7d6f023ce911367921673","ssdeep":"12288:8HamqgPQRaujhzJJuDeXNqY8GS8my92nxZiFsO2OsoF5fAF09:0P3ujhzJJuDeXNqY48my9SxZiiOWCf79","tlshash":"342508ba5c1c6b4e766a4d3ddb26307d2e4b70eeb24481dfa9ce72ecc153451e921ca0","first_seen":"2026-05-11T18:20:52.727664Z","last_seen":"2026-05-21T11:18:24.806754Z","times_seen":14,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":62,"dns":6,"connect":1,"send":0,"wait":79,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg#okx","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.portal-solstice.finance/frame.html","date":"2026-05-14T18:53:02.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\ncontent-type: image/svg+xml\r\nset-cookie: __cf_bm=PobOJ6loWuqI796Idz.DTiwpr.ShLf4A8PGdDezIus0-1778784782.7874064-1.0.1.1-0O0NnplcHYkz99wlGn7SAiZ3MDzgf3gtx4SldQPIAl0Za1J.N0sCObxiIapHuUrkoL7FQxz2WjilMKgJ51Ga3jYqqIrRxld.qYHLyqmfHgg0C3xfA4JxG2J91sJR.O3e; HttpOnly; SameSite=None; Secure; Path=/; Domain=dynamic-static-assets.com; Expires=Thu, 14 May 2026 19:23:02 GMT\r\nlast-modified: Mon, 11 May 2026 12:51:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 280872\r\nexpires: Thu, 14 May 2026 19:03:02 GMT\r\nx-static-request-id: RB4W72V9SFFT87VG\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"6f9da2559de1cb4b6920bb5083443d26\"\r\ncontent-encoding: br\r\ncf-ray: 9fbc1a7c6f7a56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2161659,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34c27e8480ac0a703049366975925116","sha1":"ad565e549815eb4b16e19d0d99608ec14656be15","sha256":"43a596818a7d65db0c43d8db1218035ce4989194642350a07c51afa0bb29de72","sha512":"3e5b2c14c6f22ca853104e908dbf7e1fadfd9fbe50686ed7ac3fa209b6de1da9464de06fd142291e3d88929208ca99d18bf1cb69fbc7d6f023ce911367921673","ssdeep":"12288:8HamqgPQRaujhzJJuDeXNqY8GS8my92nxZiFsO2OsoF5fAF09:0P3ujhzJJuDeXNqY48my9SxZiiOWCf79","tlshash":"342508ba5c1c6b4e766a4d3ddb26307d2e4b70eeb24481dfa9ce72ecc153451e921ca0","first_seen":"2026-05-11T18:20:52.727664Z","last_seen":"2026-05-21T11:18:24.806754Z","times_seen":14,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":54,"dns":4,"connect":1,"send":0,"wait":80,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/frame.html","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /frame.html HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22884\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"frame.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: W/\"d5953688787aa713c4a3a9095f63cdd7\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::brkkt-1778784782278-88eba22ed928\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":272880,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators","md5":"794628743abbe697e1514bc5ae62f2f9","sha1":"ede2174e081da1d74e30e52aa428c863c807c736","sha256":"6c60407da2782f8f6e714cb19a92f08c6721bc9a0cc8bf4647c9b9b389c59a68","sha512":"c2dfa87b647e2363e6bac218e6e1220351ed6c0a344e65851fa65445d8457a19a9aade7071b41a46bb9a3ea5afd5ad0c938bd724ec88f6f47b2f03fc67625c35","ssdeep":"6144:u0MIGA9tVNQugb2befIbSEVtQDAQSckEILNRUmPWuOb4:hMTArLKb2rNVQFxmRXOb4","tlshash":"59448db77540bbd73c192b0ae827f98a12d912f3dea4b0901d736dca11f7b2583579a0","first_seen":"2026-05-14T18:53:39.389681Z","last_seen":"2026-05-17T06:22:43.210945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/TEG-Light.ttf","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /TEG-Light.ttf HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/a84ecebd8cba5abe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22884\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"TEG-Light.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: W/\"3044f7174717c9be0c0fc4610c6f9be6\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::mcrvn-1778784782347-dd4d31a3d4ee\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79524,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 26 names, Macintosh, Copyright (c) 2020 by Alfredo Marco Pradil. All rights reserved.TEGLight1.119;HDCO;TEG-LightTEG ","md5":"3044f7174717c9be0c0fc4610c6f9be6","sha1":"51bc3d68b1ce60128dbd8589dc43e151adf38fdf","sha256":"b43bddb40bd4757394cf73c15d93db53e09a570483213a6cf02fcc223bd75b6e","sha512":"a3b868f52b96f9e1d8c7d2d0ad880001600952b1511bbe7aa8d884fd2f119d6ea2458af8515bf2bedcf9989e258d8192a419a7494abdf9f900bcac4b80861577","ssdeep":"1536:UZIwmcRfe7eFJJt/VohXGkrl1FkvVxP1wsGZsHtfdt/DfLl:UqpkG4JXKGkvFkdx2tm5X/Djl","tlshash":"fd733a02fb10cf0ed9162d3855aac7eca7b9fd11eb4fc78b54853e69acdb09c1952284","first_seen":"2025-12-01T11:20:44.57104Z","last_seen":"2026-07-18T17:43:20.535696Z","times_seen":15,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backend-main-proud-frost-1362.fly.dev/notify-visit","fqdn":"backend-main-proud-frost-1362.fly.dev","domain":"backend-main-proud-frost-1362.fly.dev","tld":"fly.dev"},"ip":{"addr":"66.241.125.20","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.portal-solstice.finance/frame.html","date":"2026-05-14T18:53:04.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fly.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:23:47 GMT","end":"Tue, 21 Jul 2026 23:23:46 GMT"},"fingerprint":{"sha1":"20:A8:A9:E2:37:03:C4:3A:08:23:D6:C0:E2:66:19:2C:80:C5:B3:55","sha256":"0C:B5:69:C7:B5:DD:5E:C5:26:F2:6C:69:63:C9:C2:55:E7:F9:23:16:A3:83:64:08:4A:72:7B:60:1D:E4:A5:03"}}},"request":{"raw":"OPTIONS /notify-visit HTTP/1.1\r\nHost: backend-main-proud-frost-1362.fly.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.portal-solstice.finance/\r\nOrigin: https://www.portal-solstice.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncontent-length: 0\r\ndate: Thu, 14 May 2026 18:53:04 GMT\r\nserver: Fly/8829d9560 (2026-05-12)\r\nvia: 2 fly.io, 2 fly.io\r\nfly-request-id: 01KRKXBM8P1KMMNHJSVMD2DMTP-arn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":63,"dns":37,"connect":8,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/flares-symbol.svg","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /flares-symbol.svg HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22885\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"flares-symbol.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: W/\"1a9e1a5d6819a9f0855a4bb7115349bd\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::6zv96-1778784782160-857362c03d0d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1768,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (1767)","md5":"1a9e1a5d6819a9f0855a4bb7115349bd","sha1":"f05f0c1b4bfda61daee120ece9194c7006ad6b64","sha256":"2fbc40191d01eb541e48b09605f28371fb784dbb21b65afebacedba151ad7795","sha512":"a70160c79f4c0888b758666e97caa4b01e13cde12fb7820c6f130c6cff45ff76ffcb65539473a018cc1aa152b099fe046696d797bf0d1f6b9ad0c3a90abb0006","ssdeep":"","tlshash":"cc3179d1993845d5ddea4edcef2564e4419efcff3e4413add47c6f3aa080ac0a905550","first_seen":"2025-12-01T11:20:44.557508Z","last_seen":"2026-07-18T17:50:26.115622Z","times_seen":14,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/solstice-logo-white.svg","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /solstice-logo-white.svg HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22884\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"solstice-logo-white.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: \"72773090607a2e7a903140d9fc39883b\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::xk785-1778784782160-cddf402d030b\r\ncontent-length: 824\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":824,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72773090607a2e7a903140d9fc39883b","sha1":"4bf1cfa3e6967941c99925f18ef6cc60acc67e58","sha256":"52787343c3cd6a9063ac119ce4423c682718a5264441bf6e943a097417583f3c","sha512":"56539def980ae0c05d81a69b635211229e8ca33ebb6e8a944d1a70ee3849ecf7d6dcea6bd6ccd1fe5b0a6729debd4d2fb4265fea0915b45244e6db3e6235baf1","ssdeep":"","tlshash":"600112d9b5e9dac05406d765a34134342a1b64f6aee286aacfd21922f59111e0d0c8c4","first_seen":"2025-12-01T11:20:44.540221Z","last_seen":"2026-07-18T17:50:26.125565Z","times_seen":14,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/IBMPlexSerif-Italic.ttf","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /IBMPlexSerif-Italic.ttf HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/a84ecebd8cba5abe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22884\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"IBMPlexSerif-Italic.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: W/\"c0a80bb51479860fbf09978b3d099bf7\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::mcrvn-1778784782337-91ea764e1af9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":170004,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409","md5":"c0a80bb51479860fbf09978b3d099bf7","sha1":"0c534fa0f1ccb4427bc8754077b918a5c71be1b4","sha256":"b11f1048745e715a55c9d837b3f10226ca3d78867b7db7251ddad8f98dcf0f38","sha512":"101f5b341d225539088e9b9d77537cc63dc5f5dd089806ca354f890220ec26dbe10fdf2a99b17ccce4e92fa90097c688e1a618d89091707aeef4155753e80ba1","ssdeep":"3072:Au5rI0D2QaYZyc4Kxje+nS99slkRUZySKlA6Okpdy8mGBPFlWF:AGrBiK5C99slkRUZylm6OIdy8mgls","tlshash":"cdf3b54abffb5b63e34b5af4cde1d2b86771f807bf606504a89095a5c5cf3410a13a82","first_seen":"2025-11-11T11:04:27.233516Z","last_seen":"2026-07-18T17:43:20.553096Z","times_seen":16,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/IBMPlexSerif-ExtraLight.ttf","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /IBMPlexSerif-ExtraLight.ttf HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/a84ecebd8cba5abe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22884\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"IBMPlexSerif-ExtraLight.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: W/\"b116a0475234b3394b4d4af104cf8c54\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::p69dz-1778784782374-a7ba66cf5d02\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":161136,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 22 names, Microsoft, language 0x409","md5":"b116a0475234b3394b4d4af104cf8c54","sha1":"9044a5273464f805a8c410a6107852eb3d7784fe","sha256":"8d902db64f46736f7d1e93a59ff35c9d1137508ce2022cd0bd0382ebbabbb442","sha512":"161e52c8654f02b144e43fb675ea74bdd3dcd40418ed0c9a392022077c332640b9beb99090ea47839c21c694538aef8fa06e35165de7d659ea48433af4bbfe27","ssdeep":"3072:p/vtfnvh2Qy9zQJX2x0+WAWUxPRtYt38yHXK5aMoYM08eVRMDYs1dnDNxS8+LT:pdnvK9z8/3AzPEtMyHa5FlL8eVRMDYsk","tlshash":"56f3b44ebbfb5b23e3471af89ce2d3b853b4f80bff61220968809a65d5df2414553981","first_seen":"2025-12-01T11:20:44.531769Z","last_seen":"2026-07-18T17:43:20.533261Z","times_seen":13,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/internal-link-white.svg","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /internal-link-white.svg HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22885\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"internal-link-white.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: \"ed5d53d12849db89be0cce347c33441f\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::p69dz-1778784782498-c59bf5f75b30\r\ncontent-length: 309\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":309,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed5d53d12849db89be0cce347c33441f","sha1":"65b66ee76c83fc8a160a2f0570f98168c67eb827","sha256":"dc499896b1a866d00e3c1e567145704aa4cb6bb77f851c7fd5a817e85f7d2f24","sha512":"2e03ac4de578e0debd36b5a154dd766d314ef252a23cad0a2c64474780441aaa42a8ef52344d9de11a8385244bd8f7e6c599691ad72a7d3e4e12d8d15d38cf33","ssdeep":"","tlshash":"59e07dff12c8d954e0214300a71871398077303ca14981c4a1046b21f3415dd3c375dc","first_seen":"2025-12-01T11:20:44.509755Z","last_seen":"2026-07-18T17:43:20.530312Z","times_seen":13,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/TEG-Regular.ttf","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /TEG-Regular.ttf HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/a84ecebd8cba5abe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22884\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"TEG-Regular.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: W/\"2e767db1de9685fc21821e5dae91aa7f\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::xk785-1778784782332-225f17af1630\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78300,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright (c) 2020 by Alfredo Marco Pradil. All rights reserved.TEGRegular1.119;HDCO;TEG-Regular","md5":"2e767db1de9685fc21821e5dae91aa7f","sha1":"326e3989f300bdd1006986498dc485e41916df30","sha256":"1881e1e1de057574ac1618c77ae4ff373f798dfa5612caf2d41215335167cf54","sha512":"81bd934800afc0282b6a16d257ea8f59a26b0c6785f574145915fa7e511c916f33e5018d8015aaef3a03160189362a7570d577edac73def53037d08ca87819d9","ssdeep":"1536:IO/twRfe5ejQk7U9s8rZnkaNrhKF+X1ifdtuDfLl:IO+GkkFnXzKgaXuDjl","tlshash":"fd734a42e751ce0fd9111e3859d6d3edb7b9fc21a70bc34b98417e6eaccb0a85d92284","first_seen":"2025-12-01T11:20:44.518726Z","last_seen":"2026-07-18T17:43:20.526741Z","times_seen":15,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.portal-solstice.finance/frame.html","date":"2026-05-14T18:53:04.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 20:25:59 GMT","end":"Wed, 15 Jul 2026 21:25:52 GMT"},"fingerprint":{"sha1":"76:B2:7F:DD:D1:3A:92:49:08:6F:F6:9D:93:7F:FA:A4:E7:AF:1E:04","sha256":"D3:90:F8:60:D1:C0:1C:19:C5:12:68:B2:54:72:DC:42:A3:9F:4C:D8:10:D6:0D:5B:71:0C:1C:EB:AF:AA:AF:F1"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.portal-solstice.finance/\r\nOrigin: https://www.portal-solstice.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 18:53:04 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: HEAD, OPTIONS, POST, GET, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://www.portal-solstice.finance\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CUaw2aDB%2FZgISrxnVU9kydfxU%2BSnWNgDl9IUZq01E0KMrzJYObGA05GT8iTYWwSLAJt9zpMcmYeN43765rJ8jYCz9yfUqNlmprk9Iaf7UCjdwXa38fMKGJGA\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fbc1a858e3a0b41-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":736,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b2e0d36fbd81e8a9c07fb95d39a92f0e","sha1":"0e5ea1eafd1c798f9d3b1ab4505dfd6b4be511f9","sha256":"1b3bbe6efd264c3e4dd2f9b97fd542f1effd6c5c50af1350a6687c7dff56135a","sha512":"e0d254a299cfe08338f3d04dbcba739d9af7faa9b53458d1b0eeca2b8cf8c181c93a35f1dfc205f118acb197be8a45a31f28df8bcdd5fc6cfef5b7cbd804c78c","ssdeep":"","tlshash":"6601df68e4680f7b9cb81358b4386907122422175f66398e7fd0978d0f8e8bf31b135e","first_seen":"2026-05-11T02:17:46.320605Z","last_seen":"2026-05-27T21:55:05.943927Z","times_seen":4375,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":23,"dns":2,"connect":2,"send":0,"wait":252,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-14T18:53:01.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 23002\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 14 May 2026 18:53:01 GMT\r\netag: W/\"560038acf273d9304a22e14259b3668d\"\r\nlast-modified: Thu, 14 May 2026 12:29:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::mcrvn-1778784781923-50b3db8154ba\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":55230,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (664)","md5":"560038acf273d9304a22e14259b3668d","sha1":"42266b9273ca72f76e8be87e95c7e2222b725b8d","sha256":"800853d3c51efe28efa3d70c0d51f11a230fec2fdc94a17b19c2a29b82da619d","sha512":"443d3639957b3d06000e7256e94c4ff99e59b7d943439a1a5d62be4baf6d2d331028757d09e3203a5bf239528faf0c773307b4d59850fb4c63f430bc92ff83f6","ssdeep":"768:i7XbDuUHteZed6NqJOp7lgIq2G6+s7sd1NT:EbN4ZY6Nqiqf6+s7sd1NT","tlshash":"8443b77162f2123b2193c3a1ba625f5a6f99e603c50bc62873fc42956f87cc6cd5365c","first_seen":"2026-05-14T18:53:39.398019Z","last_seen":"2026-05-14T18:53:39.398019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":59,"dns":32,"connect":1,"send":0,"wait":10,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/css2.css","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/81e14657b7ad5efb.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22885\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"css2.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: W/\"c9c3c5122dced76f9670a5a673c7981a\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::6gjb6-1778784782212-1bb0c659b201\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2094,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c9c3c5122dced76f9670a5a673c7981a","sha1":"7345efa4b14fb384a79c1b5255ef24b3a130f199","sha256":"8372f790d1069a8171dcb2a84eff939959679860158f374bc2ee2de5f5b6f114","sha512":"5180fb84148685b820188a68a64b162163adfb860cf81bcab30b47f1a5c5c3844442565fdafd11fd1b835de682d52d974384c6c63a78c282e0ceb0aa8d80d6aa","ssdeep":"","tlshash":"0e419a50087a6208d6875cd533ce7e329eadf2907045da387ffe2449ec8ac65a3b5b4c","first_seen":"2025-05-03T15:36:53.682945Z","last_seen":"2026-07-18T17:50:26.112989Z","times_seen":13,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/lql-v5JBq7UFMLQALnvZCX6r1X_Av8rVfrkzuv_fdjzEv88ucl4f5iCFfiN9isEc1TE=w240-h480-rw","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.portal-solstice.finance/frame.html","date":"2026-05-14T18:53:03.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:04 GMT","end":"Mon, 13 Jul 2026 08:35:03 GMT"},"fingerprint":{"sha1":"5C:99:5F:4A:FA:69:B4:95:3E:32:6C:DB:96:18:8E:69:0B:32:31:E3","sha256":"2A:DE:B2:C4:71:B6:6A:56:22:19:D8:17:38:D8:98:23:7F:30:ED:F7:7F:3A:99:D1:B6:FB:27:41:73:D9:97:72"}}},"request":{"raw":"GET /lql-v5JBq7UFMLQALnvZCX6r1X_Av8rVfrkzuv_fdjzEv88ucl4f5iCFfiN9isEc1TE=w240-h480-rw HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.webp\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 6810\r\nx-xss-protection: 0\r\ndate: Thu, 14 May 2026 17:00:18 GMT\r\nexpires: Fri, 15 May 2026 17:00:18 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 6765\r\netag: \"v1\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6b6fbff2fe93ac387e336d1dec866da","sha1":"af793695e73c59d11226d2d83a61dbf80febb06d","sha256":"44359cb6d8a5a421d5ec29407d4fba15fe0e7fbe89d4d3e8ccc7d99af5b6690d","sha512":"a4b9122e7b85c5fe36323bf871dee9f45442a0bfb41465c12d39432e5d72cf85c324b304c562c2a59945e5dfeb4ce1782edcc37c1accd22bdbdd9fce843a1e59","ssdeep":"192:gNjyOBORmR8u0ASqueIQ4BD4ky16Xu/JbWL6l54a7p:gNeOIRmIAjNU4kyEuBbxZp","tlshash":"cbe18ec2b0f62d6cf42af47addab5e574349f30449020f1cca529acab6a3cc5d6e191d","first_seen":"2026-02-10T19:01:19.766688Z","last_seen":"2026-08-16T04:24:29.375829Z","times_seen":385,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":69,"dns":41,"connect":8,"send":0,"wait":10,"receive":2,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-main-proud-frost-1362.fly.dev/notify-visit","fqdn":"backend-main-proud-frost-1362.fly.dev","domain":"backend-main-proud-frost-1362.fly.dev","tld":"fly.dev"},"ip":{"addr":"66.241.125.20","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.portal-solstice.finance/frame.html","date":"2026-05-14T18:53:04.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fly.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 23:23:47 GMT","end":"Tue, 21 Jul 2026 23:23:46 GMT"},"fingerprint":{"sha1":"20:A8:A9:E2:37:03:C4:3A:08:23:D6:C0:E2:66:19:2C:80:C5:B3:55","sha256":"0C:B5:69:C7:B5:DD:5E:C5:26:F2:6C:69:63:C9:C2:55:E7:F9:23:16:A3:83:64:08:4A:72:7B:60:1D:E4:A5:03"}}},"request":{"raw":"POST /notify-visit HTTP/1.1\r\nHost: backend-main-proud-frost-1362.fly.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.portal-solstice.finance/\r\nContent-Type: application/json\r\nContent-Length: 200\r\nOrigin: https://www.portal-solstice.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\netag: W/\"b-Ai2R8hgEarLmHKwesT1qcY913ys\"\r\ndate: Thu, 14 May 2026 18:53:04 GMT\r\nserver: Fly/8829d9560 (2026-05-12)\r\nvia: 2 fly.io, 2 fly.io\r\nfly-request-id: 01KRKXBMA3PQYQKZDF7K4746GN-arn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-08-16T06:52:25.169335Z","times_seen":18600,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/solstice-text-logo.svg","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /solstice-text-logo.svg HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22884\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"solstice-text-logo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: W/\"ea83d0973f7940b148c8ffa4146b1b04\"\r\nlast-modified: Thu, 14 May 2026 12:31:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::bhkwv-1778784782162-4ea8dfdf3b06\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea83d0973f7940b148c8ffa4146b1b04","sha1":"12a3819a53344043f4c6fde17ac1711b72c4bd4a","sha256":"819afccab26748d13d2e6cca404ebfac07b7f212f156b9f35e2c81e0a72cd62f","sha512":"975d1b0164c915e11d9e33cc7cc2805b893d2e1c0bc30a90454fac6cf70fc231ae130f0ee08ca817f34a58e5c8aad9941917f061bf867bb7ae13bf980ddea59a","ssdeep":"192:45zCpAjHJmB/rFIfKQGoJy8OPHkt9ADIe:4RLdmKKQ5JvOstPe","tlshash":"76d1c5d537ebb2f4e441e7e9452661b9b65b30fb2752c690cb60ae64fa0702c4c4d4d0","first_seen":"2025-12-01T11:20:44.512531Z","last_seen":"2026-07-18T17:43:20.549033Z","times_seen":13,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.portal-solstice.finance/favicon-new-16x16.png","fqdn":"www.portal-solstice.finance","domain":"portal-solstice.finance","tld":"finance"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.portal-solstice.finance/","date":"2026-05-14T18:53:02.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.portal-solstice.finance","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:46:21 GMT","end":"Wed, 12 Aug 2026 11:46:20 GMT"},"fingerprint":{"sha1":"DB:00:36:34:B7:14:3D:DA:A1:7E:31:CC:5A:73:E9:39:B2:4F:48:DA","sha256":"9A:79:18:49:DD:65:55:EE:5C:96:C1:BB:CA:F3:00:B9:12:20:F1:56:67:A0:4E:3A:79:F4:08:A9:48:A4:84:1F"}}},"request":{"raw":"GET /favicon-new-16x16.png HTTP/1.1\r\nHost: www.portal-solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22874\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon-new-16x16.png\"\r\ncontent-type: image/png\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\netag: \"5fad8e6f5ce0927cdc9c749e30454690\"\r\nlast-modified: Thu, 14 May 2026 12:31:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::p69dz-1778784782543-b508d70fffa4\r\ncontent-length: 603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"5fad8e6f5ce0927cdc9c749e30454690","sha1":"9c0b3ed81ca8efd44f66e4280453a5e046861fe1","sha256":"ae77031740e84fd5d16667fd6b51f5b2e7f5f4c90d4b49db67319baed76e0c62","sha512":"99992e0a99f5f6869c189b50430abcb6b0b4c7d731746f10e0df9858ca03886e16eea62482f1a297a78fbeacfece0ddd4d8fcb9a76449b53e89ceeb8fb7d8165","ssdeep":"","tlshash":"96f002cfa4290008479b982fa468d573edda3438b9c1292eaa8a35569d5803d18a4a7f","first_seen":"2026-04-21T11:19:53.408652Z","last_seen":"2026-07-18T17:43:20.56516Z","times_seen":11,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.portal-solstice.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@solana/web3.js@1.95.3/lib/index.iife.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.portal-solstice.finance/frame.html","date":"2026-05-14T18:53:02.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /@solana/web3.js@1.95.3/lib/index.iife.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.portal-solstice.finance/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 18:53:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fbc1a7c4aba0b49-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KRE72SAH7PGHZRG1FRTET6JG-fra\r\naccess-control-allow-origin: *\r\nage: 73021\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 14 May 2027 18:53:02 GMT\r\nlast-modified: Wed, 13 May 2026 07:50:18 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:wECQXFSStwURpDbMwCLozwi1P5LfP6wEdTOb4R53yXQ=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":826457,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c522aabdd1928f3bae7329e0deee54a2","sha1":"9fda248c8847a88cfce0b7a7b3701a59e7cf704f","sha256":"c040905c5492b70511a436ccc022e8cf08b53f92df3fac0475339be11e77c974","sha512":"b0c5aedcc21f6ef99d986d8cdb2ec332dfcc5e74ecafeef3c208fe594fdcb2844377988ffde2f8392ae275b21c14e3ab99595b990b7aefbbef0a52c18d57f8ec","ssdeep":"6144:MY7QATeuOTH/z2ZQ38AAi4Wk6KigSgxbH48OsQ7tSC9MF9+NuykcX36NM6bIO7e5:qAaN4Wk6KigSp9z9MF8qgOqce","tlshash":"1005b545ebe06021ba53726e4f5fb449b734e00b2904cc98bd4d92703f556788bfaee9","first_seen":"2024-09-07T17:29:16Z","last_seen":"2026-08-08T18:49:00.464246Z","times_seen":218,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":46,"dns":1,"connect":1,"send":0,"wait":122,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}