Found via IP pivot from x-connect-wizard.click

Indicator northwindsconst.net Type domain Category SEO Poisoning Confidence medium VT Score 0/94 Source urlscan First Seen 2026-04-25 00:00:06 UTC Last Seen 2026-04-25 00:00:06 UTC urlscan View scan result ↗
Raw JSON
{
  "submitter": {},
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "northwindsconst.net",
    "apexDomain": "northwindsconst.net",
    "time": "2026-04-24T20:42:56.266Z",
    "uuid": "019dc13a-f956-7039-898a-0c141a562cf8",
    "url": "https://northwindsconst.net/"
  },
  "stats": {
    "uniqIPs": 2,
    "uniqCountries": 1,
    "dataLength": 31251829,
    "encodedDataLength": 13789654,
    "requests": 1
  },
  "page": {
    "country": "CA",
    "server": "LiteSpeed",
    "ip": "64.187.97.204",
    "apexDomainAgeDays": 2,
    "mimeType": "text/html",
    "title": "Northwinds Construction - Home",
    "url": "https://northwindsconst.net/",
    "tlsValidDays": 198,
    "tlsAgeDays": 1,
    "ptr": "cp1.hostsilo.com",
    "domainAgeDays": 2,
    "tlsValidFrom": "2026-04-23T00:00:00.000Z",
    "domain": "northwindsconst.net",
    "apexDomain": "northwindsconst.net",
    "asnname": "NAMESILONNET - NAMESILO, L.L.C., CA",
    "asn": "AS400343",
    "tlsIssuer": "Sectigo Public Server Authentication CA DV R36",
    "status": "200"
  },
  "_id": "019dc13a-f956-7039-898a-0c141a562cf8",
  "_score": null,
  "sort": [
    1777063376266,
    "019dc13a-f956-7039-898a-0c141a562cf8"
  ],
  "result": "https://urlscan.io/api/v1/result/019dc13a-f956-7039-898a-0c141a562cf8/",
  "screenshot": "https://urlscan.io/screenshots/019dc13a-f956-7039-898a-0c141a562cf8.png"
}