{"report_id":"8a94a5b7-1a27-4ed4-9a1e-deb2f783c6d2","version":0,"status":"done","tags":[],"date":"2026-09-29T01:50:58Z","url":{"schema":"https","addr":"nhengenharia.com/wella/wella.htm","fqdn":"nhengenharia.com","domain":"nhengenharia.com","tld":"com"},"ip":{"addr":"69.49.241.129","port":0,"asn":31898,"as":"Oracle Corporation","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"nhengenharia.com/wella/wella.htm","fqdn":"nhengenharia.com","domain":"nhengenharia.com","tld":"com"},"title":"Secure Document Access","dom":{"size":32330,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21693)","md5":"618386d41a16e46b8a2c8d5a43deb3a1","sha1":"249711735cff132312c85da014f56298daff6b1e","sha256":"f6967f5e12a9f83b33239792a5b7836dfc57224f9eac33a4e42a3848f4df100e","sha512":"1387b2ee90a5273a48d760e991d5f0d4519e34eb29fbc666a6cd7a1b14242cf7bfcac338125c2f98adfd532cf6862578d5d198a72c5331626ccd4daf9eef0f58","ssdeep":"192:Ga5hwAll3QOBndUzDQSEKSuRgSGgXyourZt9aOsnnZ24cRJPvjf46YjX3CTCozDd:Lw2XZSeuRgSGgXyourj9eqHY3fT6r","tlshash":"18e2638d33230ccdfc32906fdaa5b749e2a09f83f14d94057adc22889fa1979e59574b","dom_hash":"domhash12bc4d8cc16fb4dc93db7a768babdcf9","first_seen":"2026-09-29T01:51:00.451424Z","last_seen":"2026-09-29T01:51:00.451424Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nhengenharia.com/wella/wella.htm","fqdn":"nhengenharia.com","domain":"nhengenharia.com","tld":"com"},"ip":{"addr":"69.49.241.129","port":0,"asn":31898,"as":"Oracle Corporation","country":"Brazil","country_code":"BR"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T01:50:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"nhengenharia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn-icons-png.flaticon.com","ip":{"addr":"95.101.10.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-05-10","domain_rank":239972,"first_seen":"2021-09-02T06:55:19Z","last_seen":"2026-09-28T16:34:10.24022Z","alert_count":0,"request_count":1,"received_data":11184,"sent_data":561,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-27T23:14:39.019501Z","alert_count":0,"request_count":2,"received_data":254152,"sent_data":1141,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nhengenharia.com","ip":{"addr":"69.49.241.129","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2024-02-09","domain_rank":0,"first_seen":"2026-09-17T07:44:08.658618Z","last_seen":"2026-09-17T07:44:08.658618Z","alert_count":3,"request_count":3,"received_data":26154,"sent_data":1578,"comment":"","tags":null,"fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nhengenharia.com/wella/wella.htm","fqdn":"nhengenharia.com","domain":"nhengenharia.com","tld":"com"},"ip":{"addr":"69.49.241.129","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"391a03608aafe3db721964175180c79a","sha1":"a6725d79111113c1b5a5b0468a32f4bd14806bb5","sha256":"b9c85dde6a48a979787ac86f7ad8b4a7c008778f43e5b42770572a3310c0b73b","sha512":"0d396b86389c28797671585098df1aa34acc32dc3db521ff8b5e0a181f9759bcf7ef9f18cc4f2e881588f3d48ac560e0462759f0fee900ab7d7da4385538019a","ssdeep":"96:ma5SGwGnGfSl3vKLOBw+fyynd5jcjzD5UR2vWpyaKPvCjzG3So5h/pc/6LE/SGA/:ma5hwAll3QOBndUzDQSEKSuRgSGgXyo3","tlshash":"86a2c89c33234ccdec36511fe898b359e3a49fc7f19ca00269e925446fa197de1a874b","size":21693,"data":"","first_seen":"2026-09-29T01:51:00.457834Z","last_seen":"2026-09-29T01:51:00.457834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhengenharia.com/wella/wella.htm","fqdn":"nhengenharia.com","domain":"nhengenharia.com","tld":"com"},"ip":{"addr":"69.49.241.129","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e8ad7f351f0cc8d3bf4cc82b5092800","sha1":"a31d0ccde5560080ac0c9137a13ac726cb0a0b90","sha256":"cd4b76a395bff07affc1fc855f1525597053012699b3deeec52a38e49567e8d4","sha512":"2eb5b4569e61796bb64346e61aba02eb5d1f29ab4c8ea54cc22b293bf1e42deb81c5725022dcd7a05069b179ff53b6dc9d7d73ad8188ed526257e61acb5f3890","ssdeep":"","tlshash":"f54101a420b730b00977a1be53ab528d7c71101b7508dc4a37ad57911f52f90eea3ae9","size":2074,"data":"","first_seen":"2026-09-29T01:51:00.460005Z","last_seen":"2026-09-29T01:51:00.460005Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/512/4726/4726010.png","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"95.101.10.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhengenharia.com/wella/wella.htm","date":"2026-09-29T01:50:31.172Z","timestamp":1790646631172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:14:08 GMT","end":"Sun, 01 Nov 2026 06:14:07 GMT"},"fingerprint":{"sha1":"A6:F3:8B:7A:AF:0D:36:E9:87:89:0B:D5:FC:12:43:BC:B6:12:56:D2","sha256":"F0:29:E3:97:07:E1:FB:FA:85:99:31:BE:7B:ED:EC:5B:5C:B4:0F:C1:28:ED:DC:08:8E:F1:90:D2:55:89:3F:95"}}},"request":{"raw":"GET /512/4726/4726010.png HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nhengenharia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 10645\r\netag: \"dedce39251ef755a9d9a2db9fc890baa\"\r\nlast-modified: Fri, 25 Apr 2025 17:30:12 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 01:50:31 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=43, ak_p; desc=\"1790646631206_1600457261_582678739_4221_1436_0_19_11\";dur=1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10645,"size_decoded":11184,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"dedce39251ef755a9d9a2db9fc890baa","sha1":"381b307106a0b1daa30902010e6bfb789496c77c","sha256":"9d453ce7da958b3b237ce1c2fc9a23a366cc61d724da0cd46d4537c1f49b3573","sha512":"8550d3ac051bbc217321286b92d82fa75c90fac78a117f98ccca8c1051548e9bdd8bf2613ff426398a3c5ccd677cad6a7d78a360c0d5803ef6c63ce1b6a75e2d","ssdeep":"192:wBBfnK/uun0uS56zA6oE9xOEunWqMk1AayEJhxbbbN:yK/tnz+EXOsqv1RyEp5","tlshash":"7c227e14a3e6a57ad8045e6317fb79952e1125da50f0ebc0a8e2ed3e004ef817f53cb5","first_seen":"2025-06-25T10:53:44.722633Z","last_seen":"2026-09-29T01:51:00.452831Z","times_seen":42,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":32,"dns":0,"connect":1,"send":0,"wait":45,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nhengenharia.com/wella/wella.htm","date":"2026-09-29T01:50:31.259Z","timestamp":1790646631259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nhengenharia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 01:50:31 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 386559\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ddk5unYiWTCynxdnmPk8spzuLLABUyGq5LG8i3nLRGEZKWmCsFIF8jXeepJC%2Ff2qVsVfzUO1BTgE0Ne28SVIx9qhzbuX%2B1JSR5T4Vcdn15PaUDurzgmdkVhfM%2BAMpSmXsnAfqLPO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a42756656cc056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 150124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":151123,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-09-29T02:54:34.653979Z","times_seen":47602,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":5,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhengenharia.com/favicon.ico","fqdn":"nhengenharia.com","domain":"nhengenharia.com","tld":"com"},"ip":{"addr":"69.49.241.129","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhengenharia.com/wella/wella.htm","date":"2026-09-29T01:50:31.295Z","timestamp":1790646631295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhengenharia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:43:41 GMT","end":"Wed, 25 Nov 2026 11:43:40 GMT"},"fingerprint":{"sha1":"C7:EA:DD:23:C8:3C:5B:EC:28:5D:7D:A8:53:57:5F:81:0A:8E:71:0B","sha256":"C5:0B:E7:40:C9:38:A3:58:03:07:D5:D3:44:8A:06:F9:AD:CD:C1:34:07:0C:E1:16:66:1F:5A:D6:78:61:C3:79"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nhengenharia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nhengenharia.com/wella/wella.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 01:50:32 GMT\r\nserver: nginx/1.29.8\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://nhengenharia.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://nhengenharia.com/wp-includes/images/w-logo-gray-white-bg.png\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T03:46:48.21976Z","times_seen":18717266,"resource_available":true,"data":null}},"time_used":1750,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1750,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"nhengenharia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nhengenharia.com/wp-includes/images/w-logo-gray-white-bg.png","fqdn":"nhengenharia.com","domain":"nhengenharia.com","tld":"com"},"ip":{"addr":"69.49.241.129","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhengenharia.com/wella/wella.htm","date":"2026-09-29T01:50:33.050Z","timestamp":1790646633050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhengenharia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:43:41 GMT","end":"Wed, 25 Nov 2026 11:43:40 GMT"},"fingerprint":{"sha1":"C7:EA:DD:23:C8:3C:5B:EC:28:5D:7D:A8:53:57:5F:81:0A:8E:71:0B","sha256":"C5:0B:E7:40:C9:38:A3:58:03:07:D5:D3:44:8A:06:F9:AD:CD:C1:34:07:0C:E1:16:66:1F:5A:D6:78:61:C3:79"}}},"request":{"raw":"GET /wp-includes/images/w-logo-gray-white-bg.png HTTP/1.1\r\nHost: nhengenharia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nhengenharia.com/wella/wella.htm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 17 Sep 2026 21:55:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3241\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 01:50:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3241,"size_decoded":3444,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"dcab89b8e04bf53fcd7f6a44a8cb4fae","sha1":"c3532d39f298c863a7489a2b4e95bda0676279c1","sha256":"c965a500f698483526faf92ac286047cecd825608cd1d83276de392b30a13a83","sha512":"ff82f2380c8ae37c2103ec466fb929353d3c8437c38ab95253ef97261fc9697c6af673a635e772d68247584d212db929f6c9cc0d5166f6907303ad6574810ee7","ssdeep":"","tlshash":"aa616dec7532920c4035393a729b9d01f7671582f772bf454f5eae634b059c4214d2da","first_seen":"2026-07-02T05:49:04.382065Z","last_seen":"2026-09-29T02:54:56.478248Z","times_seen":1810,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"nhengenharia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nhengenharia.com/wella/wella.htm","fqdn":"nhengenharia.com","domain":"nhengenharia.com","tld":"com"},"ip":{"addr":"69.49.241.129","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T01:50:29.877Z","timestamp":1790646629877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhengenharia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:43:41 GMT","end":"Wed, 25 Nov 2026 11:43:40 GMT"},"fingerprint":{"sha1":"C7:EA:DD:23:C8:3C:5B:EC:28:5D:7D:A8:53:57:5F:81:0A:8E:71:0B","sha256":"C5:0B:E7:40:C9:38:A3:58:03:07:D5:D3:44:8A:06:F9:AD:CD:C1:34:07:0C:E1:16:66:1F:5A:D6:78:61:C3:79"}}},"request":{"raw":"GET /wella/wella.htm HTTP/1.1\r\nHost: nhengenharia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 01:50:30 GMT\r\nserver: nginx/1.29.8\r\ncontent-type: text/html\r\ncontent-length: 4834\r\nlast-modified: Mon, 28 Sep 2026 14:02:22 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21716,"size_decoded":5113,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (21693), with CRLF line terminators","md5":"dd758abed85b7f8b3a22cfaf6230602b","sha1":"55094e658d13223771c20d1dfd3ffa6ab6f8dd7c","sha256":"8c9717c8e92327fb73e4b1aa5aa8300cd0be5a3874a52619f6f5e2b3a09d7598","sha512":"e7ecb219153316b9c8f2c588b21ca83163df5933a7bd3fa42828b8187343642cefae71db6c7b796aea4b82cd5ff4c8018de7feb1da146111ecb57e06b505010f","ssdeep":"96:6a5SGwGnGfSl3vKLOBw+fyynd5jcjzD5UR2vWpyaKPvCjzG3So5h/pc/6LE/SGA7:6a5hwAll3QOBndUzDQSEKSuRgSGgXyoD","tlshash":"e4a2c88c37234ccdec36511fe898b359e3a49fc7f19ca00269e925446fa197de1a874b","first_seen":"2026-09-29T01:51:00.455605Z","last_seen":"2026-09-29T01:51:00.455605Z","times_seen":1,"resource_available":true,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":339,"connect":196,"send":0,"wait":219,"receive":0,"ssl":201},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"nhengenharia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nhengenharia.com/wella/wella.htm","date":"2026-09-29T01:50:31.166Z","timestamp":1790646631166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nhengenharia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 01:50:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 469489\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnLEUGRumBm7n8iHTuFXVeiRru%2BttZwTYXwF180%2BaHVJmzjOQ12qe1UgqP4u%2FRjfiuuqKSjLJ07b8Cx85D8A2w2CZ7wSuiuhGXWDM1oeEGJSGR0fE1Ie3u52GvbfjEphnFBwJoiS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4275664fddc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18752\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":19756,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-09-29T02:54:34.616746Z","times_seen":63028,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":17,"connect":12,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}