Análisis de phishing y seguridad de sol-miner.org

The domain sol-miner.org was registered on 21 February 2026 through the HOSTINGER operations, UAB registrar. Its authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, pointing to the IP address 82.25.102.192, which belongs to AS47583 Hostinger International Limited and is geolocated in Germany. No TLS certificate is presented; the site resolves without HTTPS. The page title observed during the brief crawl reads "SOL Mining | SOL Miner | Cloud Mining", indicating a crypto‑mining narrative that targets the Solana brand. The analysis classifies the activity as a crypto scam, specifically a brand impersonation of Solana.

Security telemetry shows that three out of ninety‑three VirusTotal scanners flagged the domain, and it appears on a single security blocklist. The threat has been added to the PhishDestroy blocklist, confirming active mitigation by that service. Gridinsoft assigns a trust score of zero out of one hundred, reflecting a high likelihood of malicious intent. The domain’s current status is offline, which may be a temporary takedown or an evasion tactic.

Defenders should continue to monitor the IP 82.25.102.192 and the associated hosting ASN for any resurgence, propagate the indicator of compromise to endpoint and network filtering solutions, and ensure that Solana‑related assets are protected against credential‑stealing or fraudulent mining offers. Given the lack of SSL, any attempted HTTP connections can be intercepted for further forensic capture. The limited detection footprint—only three VT flags and one blocklist entry—suggests that broader visibility may be lacking, so threat‑intel feeds should be updated to include this domain and its infrastructure details.