{"report_id":"6630cfd6-ae79-4bae-89d9-d009b6f611b5","version":0,"status":"done","tags":[],"date":"2026-10-09T17:11:01Z","url":{"schema":"http","addr":"ilhamnet.com/Ax-sign","fqdn":"ilhamnet.com","domain":"ilhamnet.com","tld":"com"},"ip":{"addr":"103.8.25.47","port":0,"asn":132241,"as":"SKSA TECHNOLOGY SDN BHD","country":"Malaysia","country_code":"MY"},"final":{"url":{"schema":"https","addr":"ilhamnet.com/Ax-sign/","fqdn":"ilhamnet.com","domain":"ilhamnet.com","tld":"com"},"title":"ConstructConnect Log In","dom":{"size":6092,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e4814b97a9d1bced6f9ae6946c18e0b5","sha1":"5c88d450407a7a7ed540b7b473e37ef0faa92902","sha256":"886f5ddc40d96f3f7a742e74380e46757177d804ff8b8a8472014f3d37547ad5","sha512":"02df02a613a386cb62881f51406656575457d7eea48ce7190afbcc47a68257061dc37b8cd781794dad22e11d2da412829a166a54c71521fc2b2397522464ea6a","ssdeep":"96:nJ1EyxD0e+0eakm9Xywjy9DcS9ZyJHIjW/Qqzjea0fsXc:TxD0eleak4Xn29DP9ZyJ+0Hcss","tlshash":"7cc1b78a65b318e66e53e5b43bdb5b06b32490031609dc283ecc629c4fc5b9498b7bcc","dom_hash":"domhash70295b31cf6a58dd545449332067391b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ilhamnet.com/Ax-sign","fqdn":"ilhamnet.com","domain":"ilhamnet.com","tld":"com"},"ip":{"addr":"103.8.25.47","port":0,"asn":132241,"as":"SKSA TECHNOLOGY SDN BHD","country":"Malaysia","country_code":"MY"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T17:11:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ilhamnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"login.io.constructconnect.com","ip":{"addr":"34.120.58.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2008-07-24","domain_rank":2041089,"first_seen":"2024-12-04T23:10:13.034847Z","last_seen":"2026-10-06T03:12:36.617888Z","alert_count":0,"request_count":3,"received_data":54494,"sent_data":1725,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"ilhamnet.com","ip":{"addr":"103.8.25.47","port":443,"asn":132241,"as":"SKSA TECHNOLOGY SDN BHD","country":"Malaysia","country_code":"MY"},"domain_registered":"2012-10-24","domain_rank":0,"first_seen":"2025-06-01T22:11:01.553707Z","last_seen":"2026-10-07T16:00:11.89757Z","alert_count":2,"request_count":2,"received_data":6523,"sent_data":977,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ilhamnet.com/Ax-sign/","fqdn":"ilhamnet.com","domain":"ilhamnet.com","tld":"com"},"ip":{"addr":"103.8.25.47","port":443,"asn":132241,"as":"SKSA TECHNOLOGY SDN BHD","country":"Malaysia","country_code":"MY"},"introduction_type":"scriptElement","is_inline":true,"md5":"7fbb5e0d93ba2c65f3d60ae5f1269a4c","sha1":"165c5e1bb9b18a2506b3c99b461b96ee859baeaf","sha256":"2fb2e95425a157438474e6b5c4685bd7f163b18664800b22aebc042037ef92d0","sha512":"472dcb379661a7c5091986cac8e47c44dbe51a0840206c8a76a384f197d17dfbf6b84d39592f8f21f7f6e970e516537c1aebebc333ca6f1b3b00e99fda541df4","ssdeep":"","tlshash":"7821c0aa70b739b54f9f69a653cb6b41732240133c56d864394c450c2fd4f2928b69e6","size":1353,"data":"","first_seen":"2026-09-17T15:35:20.047487Z","last_seen":"2026-10-09T17:11:02.392502Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"login.io.constructconnect.com/_next/static/media/logo-white-full.acb42fe9.svg","fqdn":"login.io.constructconnect.com","domain":"constructconnect.com","tld":"com"},"ip":{"addr":"34.120.58.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilhamnet.com/Ax-sign/","date":"2026-10-09T17:10:32.338Z","timestamp":1791565832338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.io.constructconnect.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Oct 2026 11:43:16 GMT","end":"Mon, 04 Jan 2027 11:43:15 GMT"},"fingerprint":{"sha1":"DF:41:94:B1:30:81:90:E2:5C:C0:AA:A4:9E:38:57:FE:16:AE:DF:48","sha256":"05:4C:FC:F4:FF:8C:BC:7C:5A:04:87:50:BC:07:AB:60:5D:5A:E4:92:81:E1:0D:0D:23:60:56:B6:A7:45:B9:9A"}}},"request":{"raw":"GET /_next/static/media/logo-white-full.acb42fe9.svg HTTP/1.1\r\nHost: login.io.constructconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ilhamnet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 25 Sep 2026 17:07:15 GMT\r\netag: W/\"2452-1a0d98915b8\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 09 Oct 2026 17:10:32 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9298,"size_decoded":4055,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"371e569461a6dbf1afd5ad7b912dc426","sha1":"d73089454e8175b1ad9a2cde26273f21a29b77bb","sha256":"6e1919843588100c5e04f91debc3e038d0dea554382749b000438ee786384e88","sha512":"3c19b16852258a3055acfad5e7b8d8627f8d25484c6fb0f6f2c646442332458b69c936c830fb1cca4b5728a32ce2030171cef32fc8ddd2751e563d2986a55c0c","ssdeep":"192:5gWcqCRZgu2FZ20W9RK0wXQmUHYfgTPtkdK/DagYhh:ERdMQRpbtkFgIh","tlshash":"061242dc1711eee19e4c4794d8231018aa6b90ff9bd99b24c34cef653c47898986becd","first_seen":"2026-09-17T15:35:20.042912Z","last_seen":"2026-10-09T17:11:02.387476Z","times_seen":34,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":226,"connect":16,"send":0,"wait":141,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.io.constructconnect.com/_next/static/media/logo-color-tagline.4494dee1.svg","fqdn":"login.io.constructconnect.com","domain":"constructconnect.com","tld":"com"},"ip":{"addr":"34.120.58.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilhamnet.com/Ax-sign/","date":"2026-10-09T17:10:32.340Z","timestamp":1791565832340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.io.constructconnect.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Oct 2026 11:43:16 GMT","end":"Mon, 04 Jan 2027 11:43:15 GMT"},"fingerprint":{"sha1":"DF:41:94:B1:30:81:90:E2:5C:C0:AA:A4:9E:38:57:FE:16:AE:DF:48","sha256":"05:4C:FC:F4:FF:8C:BC:7C:5A:04:87:50:BC:07:AB:60:5D:5A:E4:92:81:E1:0D:0D:23:60:56:B6:A7:45:B9:9A"}}},"request":{"raw":"GET /_next/static/media/logo-color-tagline.4494dee1.svg HTTP/1.1\r\nHost: login.io.constructconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ilhamnet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 25 Sep 2026 17:07:15 GMT\r\netag: W/\"23b3-1a0d98915b8\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 09 Oct 2026 17:10:32 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9139,"size_decoded":4162,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e03caedcf92119719baf466084e494c4","sha1":"83d5df49142f8476b775e2807d3dd0cb64f3e989","sha256":"cb9ed6a8a5157d6d89921254cf125800346f1c58aab8bbc4d9e0658661653727","sha512":"e541f156f1a53073aa3597c747c137d164d29fdfa2b9a921622b35e7e5931799180f0af7f81907a57ad4a260b6379365f4426f9d0c6f3bbe7ab21bb6f2ac66ba","ssdeep":"192:BrxU4d/deaJO11korTpXkcS/xXU9dvYqe1i:jlCyorTpX9SZX2Y+","tlshash":"1d1211cc6b418af0ad8883d9cd1391a83e1bb8bfbe774724c645db717c168594c99f88","first_seen":"2026-09-17T15:35:20.044382Z","last_seen":"2026-10-09T17:11:02.388511Z","times_seen":34,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":224,"connect":14,"send":0,"wait":142,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.io.constructconnect.com/favicon.ico","fqdn":"login.io.constructconnect.com","domain":"constructconnect.com","tld":"com"},"ip":{"addr":"34.120.58.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilhamnet.com/Ax-sign/","date":"2026-10-09T17:10:32.544Z","timestamp":1791565832544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.io.constructconnect.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Oct 2026 11:43:16 GMT","end":"Mon, 04 Jan 2027 11:43:15 GMT"},"fingerprint":{"sha1":"DF:41:94:B1:30:81:90:E2:5C:C0:AA:A4:9E:38:57:FE:16:AE:DF:48","sha256":"05:4C:FC:F4:FF:8C:BC:7C:5A:04:87:50:BC:07:AB:60:5D:5A:E4:92:81:E1:0D:0D:23:60:56:B6:A7:45:B9:9A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: login.io.constructconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ilhamnet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 25 Sep 2026 17:01:40 GMT\r\netag: W/\"86be-1a0d983f920\"\r\ncontent-type: image/x-icon\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 09 Oct 2026 17:10:32 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":34494,"size_decoded":6266,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"0422c70d2fb305209e0cde6f8a5b2eca","sha1":"cf8fcd0d1d278e24c4c33722b5d8a77ed2976b3b","sha256":"c58fe019c8199a5d214843d999d38a825bb5be38319bf6122e104cf249ae4231","sha512":"93863a3fecebc972cf95d5970ac8611e8c2ca8c48926c333482559c3a27d56cdfb58b3927ddbd4c4c01e4b42e36bc4eb7b86d9ff127973c01b29488f8646693a","ssdeep":"192:BQIbftO9VpegNxdF12w/HtR/OSue3LJNT+kkY+:TeMgNxbQw/NRmSNduY+","tlshash":"5ef231f4e1326ccef749def8015c244ad8de48da9d1469e8fe35e775b8a48a012f3a41","first_seen":"2024-08-19T19:15:51.254564Z","last_seen":"2026-10-09T17:11:02.389619Z","times_seen":67,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":20,"connect":13,"send":0,"wait":140,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ilhamnet.com/Ax-sign","fqdn":"ilhamnet.com","domain":"ilhamnet.com","tld":"com"},"ip":{"addr":"103.8.25.47","port":443,"asn":132241,"as":"SKSA TECHNOLOGY SDN BHD","country":"Malaysia","country_code":"MY"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T17:10:30.037Z","timestamp":1791565830037,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ilhamnet.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 02:18:50 GMT","end":"Tue, 29 Dec 2026 02:18:49 GMT"},"fingerprint":{"sha1":"C2:B6:4F:86:B6:3E:71:52:D6:25:6E:AA:6E:3A:1C:D1:56:6C:E9:7E","sha256":"C3:F8:F3:E3:EC:08:23:0E:39:23:25:02:14:22:0D:78:67:D8:BC:79:5C:50:26:F0:C1:93:0C:C3:62:2D:F3:7E"}}},"request":{"raw":"GET /Ax-sign HTTP/1.1\r\nHost: ilhamnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Fri, 09 Oct 2026 17:10:31 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 277\r\nConnection: keep-alive\r\nLocation: https://ilhamnet.com/Ax-sign/\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T08:37:43.498908Z","times_seen":19117247,"resource_available":true,"data":null}},"time_used":1576,"timings":{"blocked":-1,"dns":614,"connect":182,"send":0,"wait":182,"receive":0,"ssl":598},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ilhamnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ilhamnet.com/Ax-sign/","fqdn":"ilhamnet.com","domain":"ilhamnet.com","tld":"com"},"ip":{"addr":"103.8.25.47","port":443,"asn":132241,"as":"SKSA TECHNOLOGY SDN BHD","country":"Malaysia","country_code":"MY"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T17:10:31.622Z","timestamp":1791565831622,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ilhamnet.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 02:18:50 GMT","end":"Tue, 29 Dec 2026 02:18:49 GMT"},"fingerprint":{"sha1":"C2:B6:4F:86:B6:3E:71:52:D6:25:6E:AA:6E:3A:1C:D1:56:6C:E9:7E","sha256":"C3:F8:F3:E3:EC:08:23:0E:39:23:25:02:14:22:0D:78:67:D8:BC:79:5C:50:26:F0:C1:93:0C:C3:62:2D:F3:7E"}}},"request":{"raw":"GET /Ax-sign/ HTTP/1.1\r\nHost: ilhamnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 09 Oct 2026 17:10:31 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6120,"size_decoded":6306,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"3034b976a3cb5928f5ebdd653db1d3de","sha1":"0194e7d9043c49388a76c0920cb441f50768b399","sha256":"ae2458bc8184cba9410af57db88260cd000f59c9c2a573e58b15e6ec49ffe1d6","sha512":"bfc498892d4dc5f8f945c190154dfee378e3ec60243dc6ce309ce74147ef493cae6764de778e7cb6117e4cddfb1493ca1dbbddad94973539139cd16cadb0e1d1","ssdeep":"96:N1EyxD0e+0eakm9Xywjy9DcS9ZyJHfjb/Qqzjea0fsXOAM:fxD0eleak4Xn29DP9ZyJ7LHcseAM","tlshash":"cbc1b78a75b318e66e43e5b43bdb5b06b32490031609dc683ecc625c4fc5b9458b7bcc","first_seen":"2026-10-07T15:56:33.983076Z","last_seen":"2026-10-09T17:11:02.391624Z","times_seen":12,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ilhamnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}