{"report_id":"0795412d-e1a6-4fdb-80b9-0d755bee29f8","version":0,"status":"done","tags":["microsoft","phishing"],"date":"2026-07-13T12:33:13Z","url":{"schema":"http","addr":"retailcomercial.com","fqdn":"retailcomercial.com","domain":"retailcomercial.com","tld":"com"},"ip":{"addr":"190.112.223.26","port":0,"asn":52423,"as":"Data Miners S.A. Racknation.cr","country":"Costa Rica","country_code":"CR"},"final":{"url":{"schema":"https","addr":"vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html","fqdn":"vinsdudouro.ch","domain":"vinsdudouro.ch","tld":"ch"},"title":"Outlook Web App","dom":{"size":54498,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7901)","md5":"61f9ef3859300d92f75e8baa90dfefa7","sha1":"ad853bfe5472c77835ea309bf4bd60035437601b","sha256":"863040577f0b74359931a6b1b9c3570418221d95dd39672f148f93a68e4bb9df","sha512":"893b22ad0a60b3160f0ab3a125111ab03b7f959ad5f3eb92602b55030b0d3548cdba0fce7c20bbfe33729c80250445bbcd485aaf8955db2b9bb82e551416a015","ssdeep":"768:5ydXYJmtz7e05NnfviyaD2xckzdKV7aQbl3ANaH17aNCB0rD01xwQnclP4cY:EtzK05N3aD2xcEkF5ioVeNd3SxcGcY","tlshash":"c1339f3f69962c362827607863e7b24a7f2e8813c24ed9247c7c175cef419a5417afd8","dom_hash":"domhash17329f9747385756a7021532ffde11da","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"retailcomercial.com","fqdn":"retailcomercial.com","domain":"retailcomercial.com","tld":"com"},"ip":{"addr":"190.112.223.26","port":0,"asn":52423,"as":"Data Miners S.A. Racknation.cr","country":"Costa Rica","country_code":"CR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-17T12:33:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"retailcomercial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-13","alert":"Phishing Block","trigger":"retailcomercial.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"vinsdudouro.ch","ip":{"addr":"167.86.70.33","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-13T12:21:57.370814Z","last_seen":"2026-07-13T12:21:57.370814Z","alert_count":4,"request_count":4,"received_data":217354,"sent_data":2293,"comment":"","tags":null,"fingerprints":[{"name":"Slider Revolution:5.4.8.3","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Underscore.js:1.8.3","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"Contact Form 7:5.1.3","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:3.6.7","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"parallax.js:5.2.21","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:5.2.21","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Outlook Web App:15.0.1367","description":"Outlook on the web is an information manager web app. It includes a web-based email client, a calendar tool, a contact manager, and a task manager.","website":"https://help.outlook.com","common_platform_enumeration":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","icon":"Outlook.svg","categories":["Webmail"]}]},{"fqdn":"retailcomercial.com","ip":{"addr":"190.112.223.26","port":443,"asn":52423,"as":"Data Miners S.A. Racknation.cr","country":"Costa Rica","country_code":"CR"},"domain_registered":"2014-08-19","domain_rank":0,"first_seen":"2026-07-13T12:33:13.590383Z","last_seen":"2026-07-13T12:33:13.590383Z","alert_count":2,"request_count":1,"received_data":350,"sent_data":488,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html","fqdn":"vinsdudouro.ch","domain":"vinsdudouro.ch","tld":"ch"},"ip":{"addr":"167.86.70.33","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f65c4c5b059f5c47944c5799cf7c11d","sha1":"6eda7c068de0950a1f7f5642d6c1f40feb5ef1a1","sha256":"4bff7d666da9183b7b18a522113c1e05593f3fc707056c17010e0ae0439dca29","sha512":"9835d6d8d6e056688a7ec0fd78c923497f58733ecb3f7e666c829864b7989d92e5a86c0d4d0c5b81aaa30a1a7bdb97f1f6ec61311c24c663861bbcfb7b7d9fc0","ssdeep":"384:Xp/t8tz4HAo99QeRwiWSM7iFi5NJsl8oWGixlk:XJmtz7e05Nnfvg","tlshash":"cf52943dac9d18321973b239075fb28af3668917930cdd143c2e93a4bf40576857ead6","size":14412,"data":"","first_seen":"2026-06-07T17:13:44.747209Z","last_seen":"2026-07-13T18:43:17.619152Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html","fqdn":"vinsdudouro.ch","domain":"vinsdudouro.ch","tld":"ch"},"ip":{"addr":"167.86.70.33","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1336b81c56594820be9b7bce92c8d2c6","sha1":"06d130675b4b2065ad8fc26788c41c1329ded751","sha256":"8e960da7d23f1066cbc42131cd0e11bd6a5729c7c70c75d57329f0ab851bb73d","sha512":"e1c61a8afd5ef8509d3a8b79c6604e5005478f2685c7ad6361011d3860c47d552bf5f1d65cdb9ebb41ed7cd676c60b0a3846709d07cede36890e726573809182","ssdeep":"","tlshash":"2021864ef224133778196937a7db8097b7a98e37c21ced2690ad0cbb388640e107e533","size":1390,"data":"","first_seen":"2026-06-07T17:13:44.749283Z","last_seen":"2026-07-13T18:43:17.619669Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html","fqdn":"vinsdudouro.ch","domain":"vinsdudouro.ch","tld":"ch"},"ip":{"addr":"167.86.70.33","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c8cee1c5633e0e3cabd91fb10a44950","sha1":"9dfb726c8c4df5c97fb14d3ab39e5be670c1b125","sha256":"f4319bca1612f1ab9a6c2a3154a15a76f1bdc8cd012b72be0474a4342c6f31c1","sha512":"a10baf382fdb93842beaf40bc96456e9789d3d48e5b953a6394a984cdd9000ee5800f4b2014d1447f73042eb7f02925d188a3af394a957a167a84a3f210d3beb","ssdeep":"","tlshash":"d931c76a7447092079aef63d126b67883939c013450699003d7cd71a6f36ec7c4a9eee","size":1743,"data":"","first_seen":"2026-06-09T07:04:51.417106Z","last_seen":"2026-07-13T18:43:17.620299Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html","fqdn":"vinsdudouro.ch","domain":"vinsdudouro.ch","tld":"ch"},"ip":{"addr":"167.86.70.33","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad8803023054cf250c976c18676885ef","sha1":"f3e0f65bdb69d2a1e2e855985b98a7f9e42f387f","sha256":"d83e913fa807f4aba671616421737a2cb21e6b60a8535942f7b4ef788afa9414","sha512":"05b60ec0a886bddbf81a07cdac2312a9f66603197d4a5c1c0001d7a8368039906c3222b2f143f40f1ea45162cc03def337f4c1facea57c84ab3038b893ea5040","ssdeep":"","tlshash":"b160000f030003c0f00fc00f0cc0003003300003c03c0c3000000030000000c0000030","size":13,"data":"","first_seen":"2026-06-07T17:13:44.781609Z","last_seen":"2026-07-13T18:43:17.620871Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html","fqdn":"vinsdudouro.ch","domain":"vinsdudouro.ch","tld":"ch"},"ip":{"addr":"167.86.70.33","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8e77d81fa40b7d1003e9f017fccbd46","sha1":"010c94d0e5692f9007ddc4e5c88c910e3bc78f73","sha256":"1bd4c65265634b81bc08fa2c0ed8c99b6a8d6b4aca9d6d470927cb429b602511","sha512":"240315ac5a4cb3dd0394e397a70536ddd812533c6a16511b79999aaed7188513e83d9c8d86f4092c3cc98069c65d6602e573f7b6db5081d655db81a8042a4d4f","ssdeep":"","tlshash":"2fb0922a3b4206a40bb6f75d32df22013b42c0435f05b88cb87de102c7109c38878f4c","size":122,"data":"","first_seen":"2024-02-14T03:38:22Z","last_seen":"2026-07-13T18:43:17.621396Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html","fqdn":"vinsdudouro.ch","domain":"vinsdudouro.ch","tld":"ch"},"ip":{"addr":"167.86.70.33","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d272e80a334b70d3f5fbb96fe454766","sha1":"436e2632474b2b556293b7bcec507c14a764b88b","sha256":"52babb57ec4b2d3a560bdcb1fc6bc0d819bda98aad9d66f8678df4fa18fa2013","sha512":"c6df065d25d60b4c2618f0da69567dd10ca9965fe3b2a444192e65878fc925a10ee4f17b2558028fe4b2936b9fac6f8db11fe232a66846d184f597202115cf4f","ssdeep":"","tlshash":"45a0020c04af42500e1be93d2126cc4450531453a1a69715740c03464f0189480a15d5","size":62,"data":"","first_seen":"2026-06-07T17:13:44.793075Z","last_seen":"2026-07-13T18:43:17.62191Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vinsdudouro.ch/owa/auth/15.0.1367/themes/resources/segoeui-regular.ttf","fqdn":"vinsdudouro.ch","domain":"vinsdudouro.ch","tld":"ch"},"ip":{"addr":"167.86.70.33","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html","date":"2026-07-13T12:32:44.236Z","timestamp":1783945964236,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.vinsdudouro.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 13:28:55 GMT","end":"Tue, 28 Jul 2026 13:28:54 GMT"},"fingerprint":{"sha1":"01:B4:9E:E9:4C:44:34:4C:0F:A0:E7:BF:62:EC:59:B3:C2:91:48:3C","sha256":"85:DE:7F:3C:54:56:EE:61:BA:95:BE:E9:28:A2:A7:52:4F:04:85:8E:48:3A:00:80:FA:1D:F3:D5:6A:1E:84:4F"}}},"request":{"raw":"GET /owa/auth/15.0.1367/themes/resources/segoeui-regular.ttf HTTP/1.1\r\nHost: vinsdudouro.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 13 Jul 2026 12:32:44 GMT\r\nServer: Apache\r\nPragma: no-cache\r\nExpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nCache-Control: no-transform, no-cache, must-revalidate, max-age=0\r\nLink: \u003chttps://vinsdudouro.ch/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nSet-Cookie: PHPSESSID=120cb605549fc1d31a4de0a496d38ef7; path=/\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Slider Revolution:5.4.8.3","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Underscore.js:1.8.3","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"Contact Form 7:5.1.3","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:3.6.7","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"parallax.js:5.2.21","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:5.2.21","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":53139,"size_decoded":53597,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6653), with CRLF, LF line terminators","md5":"e0b0bcce8cccb97d463a5e3a96465621","sha1":"30e940c8416d66b00500641af16ae66b6b306fc7","sha256":"3910d0d523b9eb5e0973ddf732f4c1658646f37a92416e1a208da2fb0c49fc0b","sha512":"8ef993a2f7ebff4a0fb3b8d219e6da2c93d917792ae5205547a46c99a41cce616a182a1c89bc5adc4a093eb176aaffb3abccc816533bf9ee6a1c9be947cfbb11","ssdeep":"1536:LU4c2BwcTE0Zbqc+mhD3Noz+dYRzQ+nz7FA+vrUU/mt87MGBmeCZf507vIcMnElN:9BwcT/ZbLBtdQzQ+nnF3vrUU/mO7Mwm0","tlshash":"1633b6337c0e8426126606c9e821b61ce1bad97fd759cca4fefe292c97c1fc48553a49","first_seen":"2026-07-13T12:33:16.501442Z","last_seen":"2026-07-13T18:43:17.617215Z","times_seen":4,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"retailcomercial.com/","fqdn":"retailcomercial.com","domain":"retailcomercial.com","tld":"com"},"ip":{"addr":"190.112.223.26","port":443,"asn":52423,"as":"Data Miners S.A. Racknation.cr","country":"Costa Rica","country_code":"CR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T12:32:42.248Z","timestamp":1783945962248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.retailcomercial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:12:36 GMT","end":"Wed, 09 Sep 2026 15:12:35 GMT"},"fingerprint":{"sha1":"3C:F3:38:58:64:61:47:09:9D:10:AA:16:6B:AA:F6:FC:31:2C:D0:64","sha256":"60:FC:1A:E2:D8:25:37:78:6E:99:08:30:C6:9D:0E:E8:F9:19:69:B0:6E:AE:0B:95:B1:62:0F:9A:52:DE:F7:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: retailcomercial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60414\"; ma=2592000,h3=\":60418\"; ma=2592000\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 13 Jul 2026 12:32:43 GMT\r\nlocation: https://vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html\r\nserver: BitNinja-WafPro\r\nvia: 1.1 Caddy\r\ncontent-length: 325\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T13:18:35.778639Z","times_seen":17238113,"resource_available":true,"data":null}},"time_used":1071,"timings":{"blocked":-1,"dns":381,"connect":163,"send":0,"wait":185,"receive":0,"ssl":342},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"retailcomercial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-13","alert":"Phishing Block","trigger":"retailcomercial.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html","fqdn":"vinsdudouro.ch","domain":"vinsdudouro.ch","tld":"ch"},"ip":{"addr":"167.86.70.33","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T12:32:43.330Z","timestamp":1783945963330,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.vinsdudouro.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 13:28:55 GMT","end":"Tue, 28 Jul 2026 13:28:54 GMT"},"fingerprint":{"sha1":"01:B4:9E:E9:4C:44:34:4C:0F:A0:E7:BF:62:EC:59:B3:C2:91:48:3C","sha256":"85:DE:7F:3C:54:56:EE:61:BA:95:BE:E9:28:A2:A7:52:4F:04:85:8E:48:3A:00:80:FA:1D:F3:D5:6A:1E:84:4F"}}},"request":{"raw":"GET /wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html HTTP/1.1\r\nHost: vinsdudouro.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 13 Jul 2026 12:32:43 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 18 Jun 2026 01:22:45 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 56317\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Outlook Web App:15.0.1367","description":"Outlook on the web is an information manager web app. It includes a web-based email client, a calendar tool, a contact manager, and a task manager.","website":"https://help.outlook.com","common_platform_enumeration":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","icon":"Outlook.svg","categories":["Webmail"]}],"data":{"size":56317,"size_decoded":56561,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7903), with CRLF line terminators","md5":"7dbbc1f08b43b799dd2dc4f4a3c4b0d0","sha1":"b39ff6ee9c5b15e9fac1c383c054744dae9ca83b","sha256":"2cbfaa717774c4af9a3e9350a13f27dfb950544c6d8e78290eca13c024665b4f","sha512":"4e718eb5977fb337c9925c9fdb8a848ba122c74ff2516465b024e5265df1c26ffd1e5a1d7adbca025142957214a1ddc97b3c480044c40e17d06aef85a3692daa","ssdeep":"768:V3qQS4/yT1GirLX9ciGwPnzz+mUVkRdKV7aQbl1ANaH17aNCB0rD01xKqPcle0cO:OGinX9ckzz+mIokF5soVeNd3SFcfcO","tlshash":"db439d3fa906283b57339634a7b3720aff144513874a872478fc175aaf719b8416aedc","first_seen":"2025-03-31T13:06:56.399991Z","last_seen":"2026-07-13T18:43:17.618457Z","times_seen":16,"resource_available":true,"data":null}},"time_used":880,"timings":{"blocked":-1,"dns":27,"connect":27,"send":0,"wait":195,"receive":253,"ssl":377},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"vinsdudouro.ch/owa/auth/15.0.1367/themes/resources/segoeui-semilight.ttf","fqdn":"vinsdudouro.ch","domain":"vinsdudouro.ch","tld":"ch"},"ip":{"addr":"167.86.70.33","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html","date":"2026-07-13T12:32:44.242Z","timestamp":1783945964242,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.vinsdudouro.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 13:28:55 GMT","end":"Tue, 28 Jul 2026 13:28:54 GMT"},"fingerprint":{"sha1":"01:B4:9E:E9:4C:44:34:4C:0F:A0:E7:BF:62:EC:59:B3:C2:91:48:3C","sha256":"85:DE:7F:3C:54:56:EE:61:BA:95:BE:E9:28:A2:A7:52:4F:04:85:8E:48:3A:00:80:FA:1D:F3:D5:6A:1E:84:4F"}}},"request":{"raw":"GET /owa/auth/15.0.1367/themes/resources/segoeui-semilight.ttf HTTP/1.1\r\nHost: vinsdudouro.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 13 Jul 2026 12:32:44 GMT\r\nServer: Apache\r\nPragma: no-cache\r\nExpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nCache-Control: no-transform, no-cache, must-revalidate, max-age=0\r\nLink: \u003chttps://vinsdudouro.ch/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nSet-Cookie: PHPSESSID=1c2ed9d95e2d9d53bf3efcfd456dbeda; path=/\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Underscore.js:1.8.3","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:3.6.7","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Contact Form 7:5.1.3","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"parallax.js:5.2.21","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress:5.2.21","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Slider Revolution:5.4.8.3","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":53139,"size_decoded":53598,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6653), with CRLF, LF line terminators","md5":"e0b0bcce8cccb97d463a5e3a96465621","sha1":"30e940c8416d66b00500641af16ae66b6b306fc7","sha256":"3910d0d523b9eb5e0973ddf732f4c1658646f37a92416e1a208da2fb0c49fc0b","sha512":"8ef993a2f7ebff4a0fb3b8d219e6da2c93d917792ae5205547a46c99a41cce616a182a1c89bc5adc4a093eb176aaffb3abccc816533bf9ee6a1c9be947cfbb11","ssdeep":"1536:LU4c2BwcTE0Zbqc+mhD3Noz+dYRzQ+nz7FA+vrUU/mt87MGBmeCZf507vIcMnElN:9BwcT/ZbLBtdQzQ+nnF3vrUU/mO7Mwm0","tlshash":"1633b6337c0e8426126606c9e821b61ce1bad97fd759cca4fefe292c97c1fc48553a49","first_seen":"2026-07-13T12:33:16.501442Z","last_seen":"2026-07-13T18:43:17.617215Z","times_seen":4,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":758,"receive":84,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"vinsdudouro.ch/owa/auth/15.0.1367/themes/resources/favicon.ico","fqdn":"vinsdudouro.ch","domain":"vinsdudouro.ch","tld":"ch"},"ip":{"addr":"167.86.70.33","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html","date":"2026-07-13T12:32:44.460Z","timestamp":1783945964460,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.vinsdudouro.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 13:28:55 GMT","end":"Tue, 28 Jul 2026 13:28:54 GMT"},"fingerprint":{"sha1":"01:B4:9E:E9:4C:44:34:4C:0F:A0:E7:BF:62:EC:59:B3:C2:91:48:3C","sha256":"85:DE:7F:3C:54:56:EE:61:BA:95:BE:E9:28:A2:A7:52:4F:04:85:8E:48:3A:00:80:FA:1D:F3:D5:6A:1E:84:4F"}}},"request":{"raw":"GET /owa/auth/15.0.1367/themes/resources/favicon.ico HTTP/1.1\r\nHost: vinsdudouro.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vinsdudouro.ch/wp-content/uploads/knbcidu/rpz1njk/amoynuj/webapp.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 13 Jul 2026 12:32:44 GMT\r\nServer: Apache\r\nPragma: no-cache\r\nExpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nCache-Control: no-transform, no-cache, must-revalidate, max-age=0\r\nLink: \u003chttps://vinsdudouro.ch/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nSet-Cookie: PHPSESSID=7558ead8e689f5e9872a0cebbd119eca; path=/\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:3.6.7","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"parallax.js:5.2.21","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Underscore.js:1.8.3","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"WordPress:5.2.21","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Contact Form 7:5.1.3","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Slider Revolution:5.4.8.3","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]}],"data":{"size":53139,"size_decoded":53598,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6653), with CRLF, LF line terminators","md5":"e0b0bcce8cccb97d463a5e3a96465621","sha1":"30e940c8416d66b00500641af16ae66b6b306fc7","sha256":"3910d0d523b9eb5e0973ddf732f4c1658646f37a92416e1a208da2fb0c49fc0b","sha512":"8ef993a2f7ebff4a0fb3b8d219e6da2c93d917792ae5205547a46c99a41cce616a182a1c89bc5adc4a093eb176aaffb3abccc816533bf9ee6a1c9be947cfbb11","ssdeep":"1536:LU4c2BwcTE0Zbqc+mhD3Noz+dYRzQ+nz7FA+vrUU/mt87MGBmeCZf507vIcMnElN:9BwcT/ZbLBtdQzQ+nnF3vrUU/mO7Mwm0","tlshash":"1633b6337c0e8426126606c9e821b61ce1bad97fd759cca4fefe292c97c1fc48553a49","first_seen":"2026-07-13T12:33:16.501442Z","last_seen":"2026-07-13T18:43:17.617215Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":0,"dns":0,"connect":43,"send":0,"wait":760,"receive":190,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}