{"report_id":"225bff34-baa8-426e-9814-2c329a95b78e","version":0,"status":"done","tags":[],"date":"2026-09-04T16:35:09Z","url":{"schema":"http","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"title":"Gemini Project","dom":{"size":132664,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16280)","md5":"0cfeba170ecb3ed631793eec3ea01de6","sha1":"5832fa87fdb55e9ad32358fe442fff348e91c929","sha256":"a2e0520f593a84de78b9fbadfb6a68638c885ea4c3eb49031b9579a6bb451750","sha512":"6349f6118025c15be24c5f55ffaebe71f8cd3e9b0ea6ce467df127b27d25d9a30b3b037b7078c82a0032a584458af72a13c7fcabfb5459a6dae5a9f5eec91c6e","ssdeep":"3072:MIV9DOGevR2l4uLrEWKxDVRJN+CQGI46U1ThurEJY17c:/VEjN9","tlshash":"a8d32b31b624917616ff03cda46fb33c62a5a701db0796f5f1a8c290829dda399b370d","dom_hash":"domhash6e2b0797ca47d4a51ace1387942393f0","first_seen":"2026-09-04T16:35:28.26651Z","last_seen":"2026-09-04T16:35:28.26651Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T16:35:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"gemini-project.eu","ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2021-11-20T01:37:20Z","last_seen":"2026-09-04T15:34:55.081782Z","alert_count":148,"request_count":37,"received_data":720074,"sent_data":19389,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Contact Form 7:6.1.7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Underscore.js:1.13.8","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Backbone.js","description":"BackboneJS is a JavaScript library that allows to develop and structure the client side applications that run in a web browser.","website":"https://backbonejs.org","common_platform_enumeration":"cpe:2.3:a:backbone_project:backbone:*:*:*:*:*:*:*:*","icon":"Backbone.js.png","categories":["JavaScript frameworks"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"172.217.113.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-09-02T00:13:42.680967Z","alert_count":0,"request_count":1,"received_data":32349,"sent_data":573,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-08-30T23:29:53.363005Z","alert_count":0,"request_count":3,"received_data":25233,"sent_data":1893,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-09-01T00:33:18.799905Z","alert_count":0,"request_count":1,"received_data":3558,"sent_data":506,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-08-31T17:36:11.503845Z","alert_count":0,"request_count":2,"received_data":288172,"sent_data":1220,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":1,"received_data":7062,"sent_data":572,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gemini-project.eu/neve-script-js-extra","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"948a0076c3254facc0686166473e9d9c","sha1":"b4857c4e515c9426910ff6dd5d9e1330f11c22db","sha256":"b56b038ba6b8c09c3224d0f18d7f5efe54c7e373140d61251a9b684dce526e78","sha512":"babeef0973f5a10ff769fec1d45060d3898838f227589d29af073becfb6bd78a50a84d353687761dfe8d4125821e60a0ce27825b74bf1c3b97aeebc3beac5569","ssdeep":"","tlshash":"1c018067d9ec1fd657c15df4401c5f7790f55161d864ea51e34dfc404190447dd45003","size":832,"data":"","first_seen":"2026-09-04T15:35:03.157279Z","last_seen":"2026-09-04T16:35:28.299503Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/wp-emoji-loader.min.js","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e704554a29c759087a2ad53e1c15e2b","sha1":"3d799019d6455079181a122bd44358d9201f0c28","sha256":"6e72bd057e907160261f9a89f2d5e998dd6ac2ed391d06b935c45731d70b3aec","sha512":"b26f1458222170fa81fc2345dc6fffc9dc7b056ac938bff6c36f3d2cab6bc023ff5331bade6616ba4c5097a1e9f9b60e0c601cb4f2d38ad4c36762cd8d5b1dce","ssdeep":"","tlshash":"ff719559eb7938db33fa01f3653e4d47eb614436e684d038c9ae631424b1893c375a1a","size":3783,"data":"","first_seen":"2026-09-04T15:35:03.160839Z","last_seen":"2026-09-04T16:35:28.304406Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-04T20:16:57.458148Z","times_seen":48893,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.0K9wbBjnOOo.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfqc6q2a7AKVa5QcyxJRKdHmqdLirA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b399df1ca08c00dfce15a89e5c55601","sha1":"790eb63687d5a29753f944b6d8a7cd80fe7b0deb","sha256":"15592c3736087e255b0b591b8dd4eeb19c6b6c80917d07ed27fc220dedfa9834","sha512":"f86c8f4d0d3b5c99f4c2a1a385d9ad7ac34f9c0a22bf8427ab51107d17094f1163eacfb63d5a653705cc04031a9bb17d605406a54a1f1630d206fd79240aa385","ssdeep":"3072:VjZxJENKQsxtStr4b1ImGa8Wv2IcunOBRGi0o+HNVEVhYoHwJe:I5Oh9Uw0hiJe","tlshash":"c754c7dcb2a670679363f4b5513f044ab13a68a5f8484dacb28cd8e26df4909417bf7c","size":286788,"data":"","first_seen":"2026-09-01T20:14:36.15797Z","last_seen":"2026-09-04T19:45:04.686723Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/backbone.min.js?ver=1.6.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"26276eaa643e5706f1628c55dd535d47","sha1":"b557c2ca04f11796eba5d9fd0c56178e2eadbe02","sha256":"9824888215d664c489cf631193c9e29a990e0b3e79bd9a1219f59ddda475fe6e","sha512":"817f14646ef3e6abbea31ea01645aa24ee7522b95e9e26c05c19249e6050ed66bac071678e62f635e95ffa5d83e520315f2c2a5755f9260cda67e6520813fced","ssdeep":"384:P+wQhm6Smn9NqTc1WsP8b/GXlPDFXYEk0NTo/bYybx9ZP0AyCEolSdO6zCBk:1raRuZW6ywq","tlshash":"fbb2b6e9739269624aba70b0453f1207e23b59893409815cf6bcd4d7bcbc98d607bf78","size":24314,"data":"","first_seen":"2026-05-22T02:27:27.075093Z","last_seen":"2026-09-04T19:48:04.423632Z","times_seen":2334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/wp-data-access/assets/js/wpda_rest_api.js?ver=5.3.9","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f04d40f860686501ea7f7de8896ecbc6","sha1":"3d886cf4bf0e819be275fee30ebb0624de4debb6","sha256":"85df5b8edef42aefe72a8417b6ffeb6e0631e7d151b90844b7f9feb29b36fe41","sha512":"1b8b9c83ff5a8e63ecfc9930403e8960306a03371471e15f27768624a6e602c57b2de55e3943b7598e14a0152a148bbec961887b4b7f4f72f54ebea4f7484f98","ssdeep":"","tlshash":"73012b089e9a120947e873ba882e1ade370cd6a35fa8d8b74a0047590cc0e36cb51a1a","size":671,"data":"","first_seen":"2023-03-29T21:51:19Z","last_seen":"2026-09-04T16:35:28.293511Z","times_seen":1061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-i18n-js-after","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"88fbcd50d2aa0249b3dab1dcec7e8dfc","sha1":"caf9fef28fecc35aad1138dc31ed877f9f54ad1b","sha256":"9a151f4695c1794cfbfcff57dbc6a2b80e90a026c405c6157074fab7d5d6e035","sha512":"23fe65c71cd76ee8128759470e2bf4038d3c1d772b141dc60f925ebfe5f4752ed89cb7d23316a2dd4ff602c32e4b1eeb5622787807b62284f692ea30279183af","ssdeep":"","tlshash":"e40112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":739,"data":"","first_seen":"2025-12-10T13:43:37.740045Z","last_seen":"2026-09-04T16:35:28.308762Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/neve-script-js-after","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"57b47a38adc7049074a27a10e0b35c90","sha1":"f3a6fb6452e8a51c877c45a75028c61bee6067c0","sha256":"d4955d2763a71649148bc3cfeb85e24ff8e425f71f48a52f4dbc9d3a68b9d985","sha512":"3964e17b0461854adc54613a13cc59f532cd8af239283c9207a0d8dc73e103d7d99cdeaa48579e23bbe14c05931a740499d9f028935f7ac185aa697f7c2cc2a1","ssdeep":"","tlshash":"e361329ffb0cf1399b5720fa8a9b3a99767c6028d2421c35ac4cc20d117842eed26d5c","size":3204,"data":"","first_seen":"2026-09-04T15:35:03.163699Z","last_seen":"2026-09-04T16:35:28.309381Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-04T20:04:09.751232Z","times_seen":5624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/themes/neve/assets/js/build/modern/scroll-to-top.js?ver=4.2.11","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"35dbbc441215f5e0a685cd1c2c56df30","sha1":"e8176fcfea7d72cff94e306d682b364060522132","sha256":"c22a7f4b31d75827e4c3c859765443173f17e3930373f19420e17b73d4c67052","sha512":"7b3c319553e9e28590aed58fc9fe6395bea5b81efeb6b1693c939491e183d41413783d614696cc85ef6af626d3948c63a69184fd6a8063e1709eb9bd2991d381","ssdeep":"","tlshash":"2a21e2b6b341247202ef66df2167b3c4327690db7542a081052c4dea6d39f7f71d2ae9","size":1264,"data":"","first_seen":"2025-11-27T01:22:30.852534Z","last_seen":"2026-09-04T16:35:28.294002Z","times_seen":1351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-04T19:58:40.428217Z","times_seen":957129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/api-request.min.js?ver=7.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e40e89bb5b27a17c222921c3b422fb70","sha1":"3559bf3408c8fa8f6b023df5b57206cc477583ce","sha256":"1a234275545ba883616ac6b4151a0f06d9bb097146e806e40317a263bbf1c51e","sha512":"7cb08adbf4d501015002fb8c06545bd5a858e9d9ec7beeab23a982071d318cf89abb470bf49ebee06756cf2a87d832f2bc36657e0f2a6beb813a851489ef2b73","ssdeep":"","tlshash":"4e1132ef749b3c5a4e22915485493f07712285ad00ed28f336d8507074b146ece37ae4","size":1023,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-09-04T16:35:28.268638Z","times_seen":16762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"86612197a4e177eb32987145aed333eb","sha1":"c44d635a6e1e192d4bbb530f9a65316b636f937c","sha256":"ce5649d7c52338b622c526a7ca5abab3da66bc357955038c7518935b1f924f7f","sha512":"7912d8f1e44199156f2bb6c8056e1e074c9c1b2e589dca6ca714db2f34e45be2c8eca2fb75703d539c91d5dd44d69eb882acb87a997373fc873ebec383e234d9","ssdeep":"","tlshash":"27c02b9bf9c12f68d30043e0015c43b7700a0863f48978f1d788c84002345e3d342602","size":150,"data":"","first_seen":"2026-09-04T15:35:03.126376Z","last_seen":"2026-09-04T16:35:28.310218Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce8c21e50473fc89ab2eb7ad4df40484","sha1":"1d09ec4e6e2778634eff18aa332b3cffd6adcdae","sha256":"e0310c732b21f93ce3556427a14c23dfbb17873f17c7f45738b1ff8891ba62a3","sha512":"b62859f9a97627c09f2a5bcdae7efe907cf75d61c43956e623edfbb34473b19d0f055ecb1afc12c082410b4d3aaddd7e9eaa69b8b0272b7aae0d4c00f9707013","ssdeep":"","tlshash":"5ca0220f3ee2ab200a332c30c02f3333800e08c3c0c80c802a8080808030ccb33b0c02","size":75,"data":"","first_seen":"2026-05-04T11:27:31.400827Z","last_seen":"2026-09-04T16:35:28.310874Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"02db3be32c04bd3625ce9bb9ccd004d6","sha1":"e1f8514a4a2680c11dbcb959650801a591715c01","sha256":"ffdeb6b377eb1e50346f87d1cff350b0ee1d9b5e0ff61e2dfdfc5686655d161f","sha512":"d16ef20853ab04d300f8ceb3d42002afaeb99e068c6724e0ae7c38c1766365c40456a2b688e3c6df6e7d6744e484fb6ec17216ff4c99e7c0395dd884c0f95575","ssdeep":"","tlshash":"ec11ef2c615221e9c4fb6bd0f8be23ac707b6236650d8051b50b53e29e28064b9c39f8","size":999,"data":"","first_seen":"2025-12-03T07:38:42.969629Z","last_seen":"2026-09-04T16:35:28.311492Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d4e47bfb38f1130194ab4b9663ce243","sha1":"7b1fd5a7fd59a89cf2e7e40f542a0f7675d62b81","sha256":"a31ea19a8418d590d2105c9dfa93ab528bd5b4b77704be078fd38b72168a94dd","sha512":"a7e115a18aefebeee4c2e2955dc607343385a1fbdbf7fd50dbda24296101a9aefae74381f66bcab880b59b14ac63b7928b351858afd482c5ca776aee3a521414","ssdeep":"","tlshash":"43e092477d30c42e5096a416e3fad6d8326cc58944329c10768c845b7ca1fda5b0e490","size":398,"data":"","first_seen":"2023-03-07T01:39:41Z","last_seen":"2026-09-04T16:35:28.31208Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c12d28583756b510d9f77ac5ea60af94","sha1":"f1e053cfd6e1939d12ef849ae10630089488649c","sha256":"e22a4a08a4906ddb97374df0aa15ee846ad5f0440d5b0dbeabf681964d3d9f23","sha512":"845b62a64d5e9280272ebe9145edb51cc13e87ccf8a58d1cf342b3b8573f70b6cdaa5c4ed3189cfeb4b30769d0587fd378043e979cf558001120fdfa04df0455","ssdeep":"","tlshash":"1131424134e10068829a1036bbbf9da1f4360beb1a377044a91efc254cb4dcdd75f938","size":1698,"data":"","first_seen":"2025-12-03T07:38:42.977188Z","last_seen":"2026-09-04T16:35:28.31262Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-09-04T20:20:42.993158Z","times_seen":53484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1cb2907ab76f81422c517363fad5ad6","sha1":"3dfd7497ba9d28167e62b775fe9bb383c2adbb19","sha256":"4cb67c0f7646a2b007aaaed9e69a47b29302f7fcaf130bd6b7956b8c5ea4a803","sha512":"80cebedea331b08f78412202f596300f4b30379cb86dee14967fe9a468191604c195c7c1f60c772ddc7713be08d69ddc39db9f85c04ffcff4f7d9683848d770c","ssdeep":"","tlshash":"81c08095dddd5d4524dac14d067c1311b1159517c61f6e55f20d404c5f6807a6904286","size":174,"data":"","first_seen":"2026-09-04T15:35:03.137682Z","last_seen":"2026-09-04T16:35:28.315541Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"caa283e048ec742a58ccc7a46f46ca31","sha1":"f61a4503b6c954fe89e88961d901def74817025e","sha256":"ebc1ebf4967f2e342e227db8dd6afc4341272d2d003bb7a386fcbadfa9516a8a","sha512":"f732e82eacbece8f922dedacefb3fe73888f300f9e6b63dae3d9db7fdc9ddc94bfdbe2b5be355cac5b8ad72e60c5eba6f57630f98b5837a10d1d8161a8fbc3e0","ssdeep":"","tlshash":"28c01228a3a80ef006674b3c855bc7f1d4aeb493890e290ed58ec15400687df4929602","size":180,"data":"","first_seen":"2025-12-21T06:47:12.623612Z","last_seen":"2026-09-04T16:35:28.316264Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4609cb48e7f69024670b5a1937f7b6af","sha1":"dee13b2d1684ff531210e64a7d9f9713f5c4f066","sha256":"d0a0b2bbb401bfd6f9ef99ea5fb9c4a9b46d87b963ad1f5ca8f40c8b3e676ac3","sha512":"b6ad4e2cd63d27a37d343ebc5773ddd70fded357e47ca20994c5b2d16e36e5828f9b17fdc0671c5a2a0c6bf406297e2944aead9cdf3b66010e81f712304334f6","ssdeep":"","tlshash":"2dc08067d9ec1fd657c11de4401c5f7790b55161d864ea51e34dfc404150447dd45003","size":169,"data":"","first_seen":"2026-09-04T15:35:03.142443Z","last_seen":"2026-09-04T16:35:28.317556Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"658ad84f20fe425b80b3ef740e662cb0","sha1":"b91bcc44cb187df058d3d55bd2552f4c356db5e1","sha256":"dae5bc18bc7cf9acea5f990f673a3f5ee0f42356db097ecef7ecbb6c3c1a5c46","sha512":"d12298bf8887fc6f7ab80a96acd761c31aa313cd972a92874a2c5c3a45f474ef99fd6c832d5325bef9b0ad8565132479999edb5f487aaa5293c1afc18ef7270c","ssdeep":"","tlshash":"3751449fbb0cf1399b5730ca8a9b3a99767c702892421c35ac4cc20d117842eed26d5c","size":2535,"data":"","first_seen":"2026-09-04T15:35:03.144965Z","last_seen":"2026-09-04T16:35:28.318372Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ac7232f87d45017115c452ff09f6b5a","sha1":"240677979f05fe8570a43fada153f5ebdcc3d75f","sha256":"48aaf6599c9d8367d5e5b73753cf221c65f7e33f3ca3288262fdc4b253e48087","sha512":"545579dac9824121b8e7bb79c754705f57a371930c3f05af9b5fa19f6a816cd10bcc04a512cdbf593efe77be09223d94939a371bb3af286c8580753365fe2593","ssdeep":"","tlshash":"17a012078081152210c64d2040010733303420d5c10382c9980d1fc55420c225683003","size":80,"data":"","first_seen":"2025-12-31T02:05:48.907453Z","last_seen":"2026-09-04T16:35:28.319182Z","times_seen":323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/neve-scroll-to-top-js-extra","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a21d5f2350a6f43e3260c56e1dc99d5","sha1":"a85a54f4d2e62fcce7ab5dfeec2562cf29c07ca1","sha256":"27f1e8a580774aed74d35a18479b9ae473501b238db5e9fde720a4b0a2d4c15d","sha512":"ea2e5219126c4dc6875f2f8d035e03218792c74db57e72bed3c680d73e113a41520b586f6187fd4c2dbed86522a4924b58ab6edefb7eb08e507c9195d5511fad","ssdeep":"","tlshash":"e9011207c081152210c68d3044010733307420d5c103c2c9980d1fc55460c225683003","size":800,"data":"","first_seen":"2026-09-04T15:35:03.159288Z","last_seen":"2026-09-04T16:35:28.319748Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/wp-api.min.js?ver=7.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"eec9b61d09405cb099e6fb52a55433b9","sha1":"34bc81732fe49d701ffb68297ff803224cbf776f","sha256":"947960adcbb708c908d60c1fb55b6c617e11c93876ecf9f525f13accf7ddb591","sha512":"7f7a4770a9a9e07e4804fc05d28f92a322cadac58dd531ec4ed721fd906bef8ce14383a990df1161a11cc75e9615aad14eed1c159ae706eeff67162862bf1acc","ssdeep":"384:HGrr//FtIYtB9Ul1Y7RNOb01D8R+4xfemrgFWuEgop2CzvYFNybiUEF7RU0LA:HGrrVtIYtzUlSNNOb05q+4xfemrgqXEq","tlshash":"6162829db4dab761039a3678256f054a723b4cee699440b8e964ccd1bd3840f2a3ff25","size":14682,"data":"","first_seen":"2023-04-05T01:39:27Z","last_seen":"2026-09-04T16:35:28.279273Z","times_seen":3914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-04T20:04:09.74371Z","times_seen":5693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-04T19:58:40.415161Z","times_seen":1046099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/underscore.min.js?ver=1.13.8","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ec876f71dece6821b9fd2a03d87c211","sha1":"d125a576160116528869921a11ff31b4f2709937","sha256":"61ccb2ff314af4b300014f1715b9e9b29f6aede9f25151e00722d5a4455c0ff2","sha512":"744feec8181058563b845cb971d0b1c2ac29f604badf333f6e54509e8c4e04e19e9ac45daff62587e65364cd6c640709eeec6efd04b92f8f8cd8ac1c12a6837e","ssdeep":"384:uhv4JyIOXArCkR85WfQVwlK8RYepz/26hIFugRjD:w4EPXwcoXmet2dt3","tlshash":"9382a4c836c3f05a976231b5007f108bf23a6ea16cada910d165f4f8bc7845d9537e6e","size":19012,"data":"","first_seen":"2026-03-27T02:17:12.655104Z","last_seen":"2026-09-04T20:30:30.875913Z","times_seen":17870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/dist/dom-ready.min.js?ver=3fe927cab37bf38d6a23","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e905912e68f450e58ff87827d799840","sha1":"fc2ca5b65017b078702664499ac86ef714e2183e","sha256":"99aaf7045a5c801db73f65f4108f8ef0893178c0fb726b70d986641845588ec1","sha512":"2796a6867cfea02aa5056a26d65c3ae6630ee098c466521f51b8a60ce3aca2a37086b0757bf084313f9f0d73c1533998940cbf0d4d872717ead31a782a1f5fbb","ssdeep":"","tlshash":"761100a62dcaee3145dd55c6823d6380f628687c1669b0d0a39cc4b8d9e840b01bdebb","size":881,"data":"","first_seen":"2026-08-12T14:43:17.725391Z","last_seen":"2026-09-04T20:30:30.903776Z","times_seen":1319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbff1481ee50233648ff62eb433baa11","sha1":"70fd7fdf4ff4a036f176240b990202c41f9e3497","sha256":"88bcc64fb1211118dc2fcc9ad888d35f36e22c953676d1331a45e4830efb089d","sha512":"2cbebbd03a7855030361d291b4680b35e2d5f3942eb381b60dcd5d27252408079935603cf0720e269717b639085c82d23b90bfcd4c4c7eda4a34418c4898c4a6","ssdeep":"","tlshash":"9351129a98b6d0c6c4436c69dfafa2bd21440037a825ece1bddcd906ffb051ab60d9d4","size":2990,"data":"","first_seen":"2026-09-04T16:27:02.014817Z","last_seen":"2026-09-04T16:35:28.283856Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-api-request-js-extra","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1388878c2b59924efb57c0a0de28cc69","sha1":"d556cda052bfc406926ddd9b298e992f96c05efb","sha256":"0f7391d2c6793de034da7505925ad2f810991ae0dc9190bfbb277a83a4a85311","sha512":"1de46ff1cd45c8a607192df7b7d4a847a254aef33a250d55e2b4fadabc39579448fe5253d4aed5d301133c924a5eeaec882bec9624f1fca53931da3c7ec257f7","ssdeep":"","tlshash":"2fd02b9bf9c12f68d30087f0015c43b7704a0863f4c9b8f1d78cc84002345e3d342602","size":241,"data":"","first_seen":"2026-09-04T15:35:03.162148Z","last_seen":"2026-09-04T16:35:28.320737Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/starter-templates-zip-preview-js-extra","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"27a7eea0dad604f2a9b273316a76c224","sha1":"f2b31a7b95ec729aad67eeb8c05eaf8755c60928","sha256":"e01a13bb02de74d38392d90b537736c765acfb7ea36661a448182ed1effbf6e0","sha512":"f26fbf06a6c3a3854f0dc05b0f74c5abfc38ed8bc8664a3babfb03e87dcad2f099d147d6f5370bf4ced5373af75226c95a7117bd7814065b29e94fe4ef8991c7","ssdeep":"","tlshash":"99011228e3a80ef046678b3c895bc7f2d4aeb493c90e690ed58ec15400687df4929602","size":838,"data":"","first_seen":"2026-04-30T07:09:39.93374Z","last_seen":"2026-09-04T16:35:28.321483Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=4.2.11","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9af54187a59db7a1783ac555215e72b","sha1":"5ae07e4496c491fbced16c302e2b9c1f9265aee3","sha256":"052d5a6abf5db38176aff8d62f5057dba9975b2d07eae1da6bed75a857304fd1","sha512":"012b44e951730eff2446c7ee34f11855e777dcf089b9f1b60e353805016d2b3a3b6829eb7f67341bcbc2070a491a32a16a263c0da4063629306b29e2897892e6","ssdeep":"192:oGaeyWYzN0AmADwy+wfOuSEKM1SJf9JM74KqLQWpVXha2B7eXvTSLSa97hRguX:oOyWsN0Am0wy+wmVEpMV/M74KqLQWpV9","tlshash":"f002a8656125707201ee0aefe2faa7c5373234efb5074055602c8c6d2ea9cc763a5df6","size":8230,"data":"","first_seen":"2026-07-23T01:01:51.956013Z","last_seen":"2026-09-04T16:35:28.291307Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.7","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-04T20:01:46.454422Z","times_seen":234460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/contact-form-7-js-before","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"54a5f68437b96d38b7eff2fac89e378f","sha1":"4cbf6ff7d8df7a1299b5f67ecd25a79ae4e57f17","sha256":"ecf077d727e7b0907da29c4624f894861f4dc52379b8b0921ebb5a44b9302883","sha512":"f081914a6aeee26e8f26301a32b0e8a67afc394a8c7cf48d7c5fdd85cf339706f4d274179794f97711d3ff7d6aae30525970732c07586ccacc2d24b0641ffb33","ssdeep":"","tlshash":"8c018095dddd5d4564dac17d067c1311f1159517c61f6e55f20d804c5fa807a6904286","size":821,"data":"","first_seen":"2026-09-04T15:35:03.150697Z","last_seen":"2026-09-04T16:35:28.322213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.7","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-04T20:01:46.542101Z","times_seen":241327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wpda_rest_api-js-extra","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bbecf3d26b86187522325d78dda0156","sha1":"5dd61de0b0a2dba933a7c2dc2fc54cd689c9b57d","sha256":"2466343dec7692e042d1e43b6db286e8cec07e6f4de9ab031290795c21e9971e","sha512":"d7fe182900f679c40e2b8bac93396e114c44cedd42a0067185bead17a3d446f2bd9d1b06d14fc106bce0ea2755bf84d87b94fc3b47f62d1dd080a71a959c7ed0","ssdeep":"","tlshash":"1ac0110aeee2aa208a22ac30802e2233800a08c2c0c808802a888080802088a22a0802","size":172,"data":"","first_seen":"2025-12-13T14:30:47.458658Z","last_seen":"2026-09-04T16:35:28.322895Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=09382f635556bec359b3","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6e64218d897c667223b9729d964464f","sha1":"298e350fbb69196edb071a2023e2a045c8528253","sha256":"a78ffc057526aa84675d2eb5519424156f7d9ba3b601704f606b2e676b5615e7","sha512":"519f27265b2f723b0acf9e7cf6682b73f0ecaeded75562d7d9b1f185f2331ff7a7bbbe2c11f9093ab1e38b16d1a78b77bafc677569f061f906380cb459e923d5","ssdeep":"192:tXCj6CnyYlqqOre482UO7N1gqts1SIVje5L1Cd+eLXPMo56MxdC:u6CyYlq/i482UO7NW1vV65AxrUowMxdC","tlshash":"5ed1b63a3224d9340bba4aefb978e3d4f424b519b90792e4c99ccf0924b5d43139876a","size":6587,"data":"","first_seen":"2025-12-08T16:51:03.59113Z","last_seen":"2026-09-04T18:36:41.239512Z","times_seen":9960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://gemini-project.eu/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:39.727Z","timestamp":1788539679727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 10 Jul 2026 03:07:40 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:39 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":22752,"size_decoded":5911,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-04T20:16:57.458148Z","times_seen":48893,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/api-request.min.js?ver=7.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.257Z","timestamp":1788539678257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-includes/js/api-request.min.js?ver=7.1 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 25 May 2022 03:29:35 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1023,"size_decoded":1016,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (988)","md5":"e40e89bb5b27a17c222921c3b422fb70","sha1":"3559bf3408c8fa8f6b023df5b57206cc477583ce","sha256":"1a234275545ba883616ac6b4151a0f06d9bb097146e806e40317a263bbf1c51e","sha512":"7cb08adbf4d501015002fb8c06545bd5a858e9d9ec7beeab23a982071d318cf89abb470bf49ebee06756cf2a87d832f2bc36657e0f2a6beb813a851489ef2b73","ssdeep":"","tlshash":"4e1132ef749b3c5a4e22915485493f07712285ad00ed28f336d8507074b146ece37ae4","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-09-04T16:35:28.268638Z","times_seen":16762,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.266Z","timestamp":1788539678266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 20 Aug 2026 03:08:03 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5791,"size_decoded":2920,"mime_type":"application/javascript","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-04T20:04:09.751232Z","times_seen":5624,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/elementor/thumbs/Bosnia-2-pjle5fm3c0vnuv5h8hovx3zbbl11qaje8flfb16qok.png","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.293Z","timestamp":1788539678293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/Bosnia-2-pjle5fm3c0vnuv5h8hovx3zbbl11qaje8flfb16qok.png HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 11646\r\nlast-modified: Wed, 26 Jan 2022 22:37:49 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:38 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":11646,"size_decoded":12057,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"e4a0c8ea9911c3ba597d72f45de6a9d4","sha1":"c4cfd7dbfa835f45a17df59e79a990a4d7496574","sha256":"be0b21921509c4394e8baabf802fc9796528e24a5ab413aec879051373d8cb7b","sha512":"d314117bcad018cac9c16e8900842afed92b1394bc687a5de88506d4a06421c34bc129ccc9c149fde0267701c43137ea7d85c3cc48fc7cb9cd32ac9c3e5cd0ce","ssdeep":"192:JAA+SfL4gird1NYTa20nCkVSdF8CFBfXMtDiI9KGmf0kSR5vHVsDdhkxNQBs3tmt:JANSfcgirKTt0nxrkktGzckSR5vKdhkI","tlshash":"6432c07231a1cc50be8ebe2d31d98860a871d9591ecdf50cb541e95d68ec787534d783","first_seen":"2024-12-23T14:25:46.411018Z","last_seen":"2026-09-04T16:35:28.27005Z","times_seen":4,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/elementor/thumbs/Fifty-Fifty-2-1-prbhsl2u7piz6k83j5hw23cl2awlr8l69lts9u4978.png","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.295Z","timestamp":1788539678295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/Fifty-Fifty-2-1-prbhsl2u7piz6k83j5hw23cl2awlr8l69lts9u4978.png HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 7280\r\nlast-modified: Tue, 05 Jul 2022 13:00:59 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:38 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":7280,"size_decoded":7690,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"a0043eeb473ae79a6669b7b1268dae21","sha1":"94d0cbd634acf4c85cd8d859a2d75740abc922c9","sha256":"803893515168d857228390faa909b09962b7d96760600642a82e7580ca4e2a20","sha512":"6df7d66f213f0f1b13a8c2a9bdb75736ba766c3f948d730e6d8571fec962f1a291316956ce7d9f1a422c67567f505a6f3da47fabc3401e03298efbf297961bab","ssdeep":"192:exbLsrmSGcITswqXAULjI0hqZVsWmOHEChwgEvbCRZ9RVlcHc/Tn:exEcr0MZV/48Hv9RVGHU","tlshash":"1be1a0a41f9bb438c81e04e7713959d252809aab272445a4fc1b8f5ee1fe97d1e700b3","first_seen":"2024-12-23T14:25:46.414488Z","last_seen":"2026-09-04T16:35:28.270622Z","times_seen":4,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/2022/01/cropped-favicon-1-192x192.png","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:39.694Z","timestamp":1788539679694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/cropped-favicon-1-192x192.png HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 21863\r\nlast-modified: Thu, 27 Jan 2022 13:39:13 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:39 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21863,"size_decoded":22274,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"2e08285c30434632bcf2a2e32058df57","sha1":"637009f06c1b5deadebcfab614c195b4378979b2","sha256":"b4d9779910e2c4ab6e9721c9e159e8d340df965d988b253ac3dac87a02c6b5e4","sha512":"5c1504f8eae66085b326b23a79c411724f987a1a3587e81f4ca90845b0c81e69d3a2e392ed47defbf416c2972fc3e0e5038883dcedd9dc8993547e60527fe131","ssdeep":"384:knwSkBFZQ60zrejLpzSwFB9vPNhgleVEGOFPcKt4sYJaKZRpeDbw3r8:zSkBnoz8pzS8Bt/gl8NKt9ak","tlshash":"9fa2e16a1b6209dde1e65c131f7906cb4d124202764282fcfd4e7898fa6e3d2856dcd6","first_seen":"2024-12-23T14:25:46.423951Z","last_seen":"2026-09-04T16:35:28.271543Z","times_seen":4,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/2022/01/cropped-favicon-1-32x32.png","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:39.695Z","timestamp":1788539679695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/cropped-favicon-1-32x32.png HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 1924\r\nlast-modified: Thu, 27 Jan 2022 13:39:13 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:39 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":1924,"size_decoded":2334,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"9a369540e0c0affd7b4f2e9ab83e22cd","sha1":"77d5f7b465171625b5184ea6c59d05ea2f181ad6","sha256":"1cf24227f0912797fa0d888bda02464c7c8936fceba5bde020c809e305945caf","sha512":"86420615f15c70c0aa9704e915adf5372cd2fb1de2c78bcd9c410046057578c4a3a38662afe31e20f3fe2776861e483f275de6187567e01c435c3b7c0e75b49b","ssdeep":"","tlshash":"07413b6541d1521b431b153c0a1aee98b3a0551f057d7b2c047ed7e013b6b0d0e4ad3b","first_seen":"2024-12-23T14:25:46.426314Z","last_seen":"2026-09-04T16:35:28.272145Z","times_seen":4,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.113.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{b73fa95d-4ca1-4ec3-b381-5dc5ca91f829}?https://gemini-project.eu","date":"2026-09-04T16:34:40.128Z","timestamp":1788539680128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"DB:16:C1:37:8D:6C:67:F5:7B:69:A5:CC:5A:E4:14:86:68:68:28:08","sha256":"7C:9F:DC:87:45:B2:79:1B:26:C3:F9:27:4E:6A:13:97:FF:C5:A0:2C:69:69:31:D1:9D:3F:8D:E7:2F:66:1C:15"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Fri, 04 Sep 2026 16:34:40 GMT\r\nserver: ESF\r\ncontent-length: 2635\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=534=Afrr9wo9R64-q3ggfRUFaLP8CRrbwEAMvBYAhREef4BDv7k1pWuV5cznNE6BRPHwubOams5Ozntwn0-1oRxSWLjx4khDJOvJueaBILcIicTQ7-GhnwTP7TqaC8TRAn-lnuyuIByBKMK3Lzq0Hi1U69Hj0UMhxk3j8fUYeAKy8YGAGosnO-JLr7aT6hro6W-VPVf4Wgda7mutQyqshrdr6doxRtuhf7KX; expires=Sat, 06-Mar-2027 16:34:40 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Fri, 04 Sep 2026 16:34:40 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"NID","value":"534=Afrr9wo9R64-q3ggfRUFaLP8CRrbwEAMvBYAhREef4BDv7k1pWuV5cznNE6BRPHwubOams5Ozntwn0-1oRxSWLjx4khDJOvJueaBILcIicTQ7-GhnwTP7TqaC8TRAn-lnuyuIByBKMK3Lzq0Hi1U69Hj0UMhxk3j8fUYeAKy8YGAGosnO-JLr7aT6hro6W-VPVf4Wgda7mutQyqshrdr6doxRtuhf7KX","quoted":false,"path":"/","domain":".translate-pa.googleapis.com","expires":"2027-03-06T16:34:40Z","raw_expires":"Sat, 06-Mar-2027 16:34:40 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"NID=534=Afrr9wo9R64-q3ggfRUFaLP8CRrbwEAMvBYAhREef4BDv7k1pWuV5cznNE6BRPHwubOams5Ozntwn0-1oRxSWLjx4khDJOvJueaBILcIicTQ7-GhnwTP7TqaC8TRAn-lnuyuIByBKMK3Lzq0Hi1U69Hj0UMhxk3j8fUYeAKy8YGAGosnO-JLr7aT6hro6W-VPVf4Wgda7mutQyqshrdr6doxRtuhf7KX; expires=Sat, 06-Mar-2027 16:34:40 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31482,"size_decoded":3502,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"91115de97ad1a90076e130223cdd90ad","sha1":"f3ad22e4fa892dfbff0d083bc0465fc3a2240317","sha256":"816e9881b1955d8beff3011d93481dad4c4de71bbd80b50ac267e7e45d4c3bad","sha512":"fbca69c3431240ab374b9ccfb06d76074059cdfe2f153743b292020271a8a3a36885189594a97fd74b43249b1f6359af62dfd0731e7b50e024f37faebdccf620","ssdeep":"192:Z6STcB9aqiD0+52DdKXrWryLxizUSTcB9aqdD0+52DdKXrWryLxG:JTcbaU3KXiMxidTcbah3KXiMxG","tlshash":"d0e267bae8b50d9b6a5e65b416fa2a03306041db4edc3c053b1c1e4c6fdec1e6c7169e","first_seen":"2025-09-02T05:12:23.753308Z","last_seen":"2026-09-04T19:45:04.751586Z","times_seen":27520,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":4,"connect":8,"send":0,"wait":28,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T16:34:36.206Z","timestamp":1788539676206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://gemini-project.eu/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://gemini-project.eu/wp-json/wp/v2/pages/1509\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://gemini-project.eu/\u003e; rel=shortlink\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: EXPIRED\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Contact Form 7:6.1.7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Underscore.js:1.13.8","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Backbone.js","description":"BackboneJS is a JavaScript library that allows to develop and structure the client side applications that run in a web browser.","website":"https://backbonejs.org","common_platform_enumeration":"cpe:2.3:a:backbone_project:backbone:*:*:*:*:*:*:*:*","icon":"Backbone.js.png","categories":["JavaScript frameworks"]}],"data":{"size":112236,"size_decoded":23106,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (16280), with CRLF, LF line terminators","md5":"fd65084bc5603afb4289b6c25d514fe6","sha1":"59d3c195122f66353694cbcacb8ddb23c9d36761","sha256":"de0aceb64c48ca769d419cb628455f284cb9c129e807bb508ddf4fd142b9e30d","sha512":"09f752afe856bc8d99b23d1f4e520d6d93ebfbf1ffd7d7e0821aa4f21394b3de3ad2233c0bfc2263ec697a99a5f2bd0c885f52120e0bbb16803416036753d27a","ssdeep":"3072:X/VkDOGNvR2l4uLc0XKjFt19tQGI46U1Th7rEmYs:Pk0UN","tlshash":"f5b30836b27511bb2abb539ef89eb32cb255a501db0797f5f1a8c144c1c8e9318b270d","first_seen":"2026-09-04T15:35:03.061581Z","last_seen":"2026-09-04T16:35:28.273577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1840,"timings":{"blocked":0,"dns":574,"connect":29,"send":0,"wait":1145,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/underscore.min.js?ver=1.13.8","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.254Z","timestamp":1788539678254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-includes/js/underscore.min.js?ver=1.13.8 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 21 May 2026 03:19:49 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19012,"size_decoded":7824,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18977)","md5":"3ec876f71dece6821b9fd2a03d87c211","sha1":"d125a576160116528869921a11ff31b4f2709937","sha256":"61ccb2ff314af4b300014f1715b9e9b29f6aede9f25151e00722d5a4455c0ff2","sha512":"744feec8181058563b845cb971d0b1c2ac29f604badf333f6e54509e8c4e04e19e9ac45daff62587e65364cd6c640709eeec6efd04b92f8f8cd8ac1c12a6837e","ssdeep":"384:uhv4JyIOXArCkR85WfQVwlK8RYepz/26hIFugRjD:w4EPXwcoXmet2dt3","tlshash":"9382a4c836c3f05a976231b5007f108bf23a6ea16cada910d165f4f8bc7845d9537e6e","first_seen":"2026-03-27T02:17:12.655104Z","last_seen":"2026-09-04T20:30:30.875913Z","times_seen":17870,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.7","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.270Z","timestamp":1788539678270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.7 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 17 Aug 2026 15:09:38 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":13452,"size_decoded":4703,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-04T20:01:46.542101Z","times_seen":241327,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/dist/dom-ready.min.js?ver=3fe927cab37bf38d6a23","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.271Z","timestamp":1788539678271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-includes/js/dist/dom-ready.min.js?ver=3fe927cab37bf38d6a23 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 20 Aug 2026 03:08:04 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":881,"size_decoded":924,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (683)","md5":"7e905912e68f450e58ff87827d799840","sha1":"fc2ca5b65017b078702664499ac86ef714e2183e","sha256":"99aaf7045a5c801db73f65f4108f8ef0893178c0fb726b70d986641845588ec1","sha512":"2796a6867cfea02aa5056a26d65c3ae6630ee098c466521f51b8a60ce3aca2a37086b0757bf084313f9f0d73c1533998940cbf0d4d872717ead31a782a1f5fbb","ssdeep":"","tlshash":"761100a62dcaee3145dd55c6823d6380f628687c1669b0d0a39cc4b8d9e840b01bdebb","first_seen":"2026-08-12T14:43:17.725391Z","last_seen":"2026-09-04T20:30:30.903776Z","times_seen":1319,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:40.086Z","timestamp":1788539680086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 20:16:57 GMT\r\nexpires: Thu, 02 Sep 2027 20:16:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 159463\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":1583,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-04T19:45:04.762588Z","times_seen":74311,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:40.088Z","timestamp":1788539680088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 08:23:17 GMT\r\nexpires: Sat, 04 Sep 2027 08:23:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 29483\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":2515,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-04T19:26:07.735726Z","times_seen":92106,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/elementor/thumbs/luxembourg-2-pjle5xh0xvk3zgfjc7esqhh2lwl0sjiamvznfag9ec.jpg","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.288Z","timestamp":1788539678288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/luxembourg-2-pjle5xh0xvk3zgfjc7esqhh2lwl0sjiamvznfag9ec.jpg HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4254\r\nlast-modified: Wed, 26 Jan 2022 22:37:49 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:38 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":4254,"size_decoded":4665,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 130x130, components 3","md5":"b0b1a7a6cd9bf974611186742738a6b5","sha1":"98b24f13441d3212256c49ce863715fea46037b1","sha256":"35658855e4557df1ec92558917c2afa79f381ea989cd8c2bb4ee884c0f2e23ae","sha512":"de970c1bff93c4b931e590d2e4bb70374e89084723dbe5c11b637f40caf5bd148a4416321e4afff684369f045b7e9a5da4c08e2967b49b5a7b03068cae3d596d","ssdeep":"96://EzZih8rR+I5bPCn6fZJnXznFrhOAzNmpwo5dp3kPn65E://qZW8J5g6BlXBzspwofp35E","tlshash":"ef917d13cd0443d20aa1eeb56fcb099562a60bcf49c1b28e31b7c93243600f9f50d6cc","first_seen":"2024-12-23T14:25:46.40338Z","last_seen":"2026-09-04T16:35:28.278041Z","times_seen":4,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/tablepress/css/build/default.css?ver=3.3.4","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.247Z","timestamp":1788539678247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/plugins/tablepress/css/build/default.css?ver=3.3.4 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 19 Aug 2026 15:11:26 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8064,"size_decoded":2188,"mime_type":"text/css","magic":"ASCII text, with very long lines (8063)","md5":"606c174d8ef9f56c42139a27c0e7cdc5","sha1":"25883f9e9cf6ecd202251a745afa43cf1b019667","sha256":"3a1fb13a37375360a4e8b7725fb3a2fc085cb5fd3abe9750d5549c89abd08264","sha512":"1ce8d23de2504c24c1b943a07603b9c62bff132f888bc9ca3e204b66f4fb57ffe8d90c5f31aa610d8a7f8495373eb4424acee2c369d60e3c01c524d8c61349ef","ssdeep":"192:iCc3qg4q2PcDnj2wThGI5vMRV+B0aw0u0b0d0l0b6a0P:i/Z0B0u0b0d0l0b6a0P","tlshash":"92f1eea2e7a437f9b2b3c11ab9f4be5db9206ce1f5811afbf05181700689d535fa1c05","first_seen":"2026-05-20T06:58:43.680192Z","last_seen":"2026-09-04T19:55:16.226938Z","times_seen":1959,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/wp-api.min.js?ver=7.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.258Z","timestamp":1788539678258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-includes/js/wp-api.min.js?ver=7.1 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 30 Mar 2023 15:08:06 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14682,"size_decoded":4569,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14647)","md5":"eec9b61d09405cb099e6fb52a55433b9","sha1":"34bc81732fe49d701ffb68297ff803224cbf776f","sha256":"947960adcbb708c908d60c1fb55b6c617e11c93876ecf9f525f13accf7ddb591","sha512":"7f7a4770a9a9e07e4804fc05d28f92a322cadac58dd531ec4ed721fd906bef8ce14383a990df1161a11cc75e9615aad14eed1c159ae706eeff67162862bf1acc","ssdeep":"384:HGrr//FtIYtB9Ul1Y7RNOb01D8R+4xfemrgFWuEgop2CzvYFNybiUEF7RU0LA:HGrrVtIYtzUlSNNOb05q+4xfemrgqXEq","tlshash":"6162829db4dab761039a3678256f054a723b4cee699440b8e964ccd1bd3840f2a3ff25","first_seen":"2023-04-05T01:39:27Z","last_seen":"2026-09-04T16:35:28.279273Z","times_seen":3914,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.261Z","timestamp":1788539678261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://gemini-project.eu/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=09382f635556bec359b3","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.272Z","timestamp":1788539678272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=09382f635556bec359b3 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 20 Aug 2026 15:09:02 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":6587,"size_decoded":2728,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6587), with no line terminators","md5":"a6e64218d897c667223b9729d964464f","sha1":"298e350fbb69196edb071a2023e2a045c8528253","sha256":"a78ffc057526aa84675d2eb5519424156f7d9ba3b601704f606b2e676b5615e7","sha512":"519f27265b2f723b0acf9e7cf6682b73f0ecaeded75562d7d9b1f185f2331ff7a7bbbe2c11f9093ab1e38b16d1a78b77bafc677569f061f906380cb459e923d5","ssdeep":"192:tXCj6CnyYlqqOre482UO7N1gqts1SIVje5L1Cd+eLXPMo56MxdC:u6CyYlq/i482UO7NW1vV65AxrUowMxdC","tlshash":"5ed1b63a3224d9340bba4aefb978e3d4f424b519b90792e4c99ccf0924b5d43139876a","first_seen":"2025-12-08T16:51:03.59113Z","last_seen":"2026-09-04T18:36:41.239512Z","times_seen":9960,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:39.834Z","timestamp":1788539679834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 23:15:29 GMT\r\nexpires: Fri, 03 Sep 2027 23:15:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 62350\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4818,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-04T19:45:04.75077Z","times_seen":37615,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.250Z","timestamp":1788539678250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 09 Aug 2023 03:17:15 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5307,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-04T19:58:40.428217Z","times_seen":957129,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/backbone.min.js?ver=1.6.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.255Z","timestamp":1788539678255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-includes/js/backbone.min.js?ver=1.6.1 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 21 May 2026 03:19:49 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24314,"size_decoded":8479,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24279)","md5":"26276eaa643e5706f1628c55dd535d47","sha1":"b557c2ca04f11796eba5d9fd0c56178e2eadbe02","sha256":"9824888215d664c489cf631193c9e29a990e0b3e79bd9a1219f59ddda475fe6e","sha512":"817f14646ef3e6abbea31ea01645aa24ee7522b95e9e26c05c19249e6050ed66bac071678e62f635e95ffa5d83e520315f2c2a5755f9260cda67e6520813fced","ssdeep":"384:P+wQhm6Smn9NqTc1WsP8b/GXlPDFXYEk0NTo/bYybx9ZP0AyCEolSdO6zCBk:1raRuZW6ywq","tlshash":"fbb2b6e9739269624aba70b0453f1207e23b59893409815cf6bcd4d7bcbc98d607bf78","first_seen":"2026-05-22T02:27:27.075093Z","last_seen":"2026-09-04T19:48:04.423632Z","times_seen":2334,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.7","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.268Z","timestamp":1788539678268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.7 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 17 Aug 2026 15:09:38 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":12512,"size_decoded":3944,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-04T20:01:46.454422Z","times_seen":234460,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/2022/01/cropped-logo_3-1.png","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.283Z","timestamp":1788539678283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/cropped-logo_3-1.png HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 12801\r\nlast-modified: Wed, 26 Jan 2022 22:16:35 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:38 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12801,"size_decoded":13212,"mime_type":"image/png","magic":"PNG image data, 200 x 88, 8-bit/color RGBA, non-interlaced","md5":"a0b8cf8f63da9af7f58fa912ab451eb5","sha1":"829a8a04d94d05de5b2889cf43d98b27a2254f85","sha256":"b36a9554d807c8a69fdc4b928028628b110b0923476c50273a94976355682645","sha512":"4e151bb37e1a4200904f2896b7c4eb7414934a4d6ba549f585eede93cd62127831a69848e973ad4ec4194a33d4c069643f40dc71a7559444fb6c805e0fd138db","ssdeep":"384:nksW9A4ZJrNJyu3sLheBUkao5ptpk3umn8JdRY0h:klrpN8ucLh6So563Rg7Y0h","tlshash":"4a42c05d467b819ae9ec62c7127cefd301a40c44d7b091287faef0aa979c7d9c5a1834","first_seen":"2024-12-23T14:25:46.396375Z","last_seen":"2026-09-04T16:35:28.28329Z","times_seen":4,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:39.689Z","timestamp":1788539679689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:42 GMT","end":"Mon, 02 Nov 2026 08:37:41 GMT"},"fingerprint":{"sha1":"CB:38:34:2F:7D:9E:35:93:25:09:7C:BC:CF:D5:8B:CD:34:CD:70:E7","sha256":"50:17:03:01:AA:C0:DB:75:43:0B:A6:DC:1F:27:C3:AA:1E:93:2F:67:A7:8C:54:7D:FE:7B:6A:E6:F1:9F:C7:FF"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 04 Sep 2026 16:34:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2990,"size_decoded":1580,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1825)","md5":"bbff1481ee50233648ff62eb433baa11","sha1":"70fd7fdf4ff4a036f176240b990202c41f9e3497","sha256":"88bcc64fb1211118dc2fcc9ad888d35f36e22c953676d1331a45e4830efb089d","sha512":"2cbebbd03a7855030361d291b4680b35e2d5f3942eb381b60dcd5d27252408079935603cf0720e269717b639085c82d23b90bfcd4c4c7eda4a34418c4898c4a6","ssdeep":"","tlshash":"9351129a98b6d0c6c4436c69dfafa2bd21440037a825ece1bddcd906ffb051ab60d9d4","first_seen":"2026-09-04T16:27:02.014817Z","last_seen":"2026-09-04T16:35:28.283856Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":41,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.0K9wbBjnOOo.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfqc6q2a7AKVa5QcyxJRKdHmqdLirA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:39.837Z","timestamp":1788539679837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.0K9wbBjnOOo.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfqc6q2a7AKVa5QcyxJRKdHmqdLirA/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 99726\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 18:32:31 GMT\r\nexpires: Fri, 03 Sep 2027 18:32:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 02 Sep 2026 04:10:31 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 79328\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":286788,"size_decoded":100585,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2553)","md5":"7b399df1ca08c00dfce15a89e5c55601","sha1":"790eb63687d5a29753f944b6d8a7cd80fe7b0deb","sha256":"15592c3736087e255b0b591b8dd4eeb19c6b6c80917d07ed27fc220dedfa9834","sha512":"f86c8f4d0d3b5c99f4c2a1a385d9ad7ac34f9c0a22bf8427ab51107d17094f1163eacfb63d5a653705cc04031a9bb17d605406a54a1f1630d206fd79240aa385","ssdeep":"3072:VjZxJENKQsxtStr4b1ImGa8Wv2IcunOBRGi0o+HNVEVhYoHwJe:I5Oh9Uw0hiJe","tlshash":"c754c7dcb2a670679363f4b5513f044ab13a68a5f8484dacb28cd8e26df4909417bf7c","first_seen":"2026-09-01T20:14:36.15797Z","last_seen":"2026-09-04T19:45:04.686723Z","times_seen":147,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":16,"receive":32,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:40.085Z","timestamp":1788539680085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 08:23:15 GMT\r\nexpires: Sat, 04 Sep 2027 08:23:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 29485\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":4177,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-09-04T19:45:04.735147Z","times_seen":97188,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":3,"connect":30,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=7.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.239Z","timestamp":1788539678239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=7.1 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 21 Nov 2022 20:26:44 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":693,"size_decoded":711,"mime_type":"text/css","magic":"ASCII text","md5":"9b0f26cf8d22d4e9455f67b21c2f9759","sha1":"f0240a4411d4a2eb073c574d37618e503392b76e","sha256":"226456d9a9eef8f0831b6b181be100a49cbaec1651a8bd45d7d0cc897d161538","sha512":"fb5ba2942b79906fd59181f39f3c753d9950ab5502a56a3d164dff50516cc70149ea68d3478f4b7adc09e7fb67fd8519ff83efd5089fa51b1b85400c50641d4b","ssdeep":"","tlshash":"be01470022d7472bb00bcd53f8bb137c32260682c4526f7962aab7f8c85a0b99233034","first_seen":"2023-04-05T08:25:05Z","last_seen":"2026-09-04T16:35:28.285984Z","times_seen":1339,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/elementor/thumbs/spain-2-pjle64zqgjuekc4m4antafkrczjyi4c5bx7j9i53mo.jpeg","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.285Z","timestamp":1788539678285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/spain-2-pjle64zqgjuekc4m4antafkrczjyi4c5bx7j9i53mo.jpeg HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3425\r\nlast-modified: Wed, 26 Jan 2022 22:37:49 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:38 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3425,"size_decoded":3836,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 130x80, components 3","md5":"b3ed3a23ae9bbcc9462beeb4c5b3630f","sha1":"32641167e18f0d2ec8b56083816dbf824c7d1e2d","sha256":"b75e557580c6a2f28f51255dd6edc9aa61f057005209eb805e779c40372f51a5","sha512":"ddaac0635f1f8afb84ac9a357066f73fcb3c84c8d0f633cbf5c959a25c2f4ce591e4664c7dabd5b1f457edf9d7e1f7e39e17ac4e7e14c4c58402f65a6547f69c","ssdeep":"","tlshash":"3a613a0fae0e93e05847de7d781516c2b16f3e516fac77a33531cca2a911cc1a4a3884","first_seen":"2024-12-23T14:25:46.39903Z","last_seen":"2026-09-04T16:35:28.286601Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/elementor/thumbs/poland-2-pjle618dp7p99wa2q91b0giwzg2hnbx7zellceaopg.png","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.287Z","timestamp":1788539678287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/poland-2-pjle618dp7p99wa2q91b0giwzg2hnbx7zellceaopg.png HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 9929\r\nlast-modified: Wed, 26 Jan 2022 22:37:49 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:38 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9929,"size_decoded":10339,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"61c22a4705224df4bcc106e22f9f3c6d","sha1":"20098a4f4637daea176b2eda40021597c3fd36ce","sha256":"d498cd846d71ba0332d7034f1d4c22a45d9aecd03d3524b0939683811ed51ed2","sha512":"a89f75a2e7263a6546ee644886b819956ba400982f900415ad685ce352bf462d25382597a8072c6729714fb7ebc11528d7df1eb6c71116f4e7391f9e3c7fa767","ssdeep":"192:w7lHz4O2nuW4HIrI1wosgr8DbYnuRR8kVoVj4ZB:Gz4OxWgSsr8fYnuRVoyZB","tlshash":"5222afdad2f49ee38f1752b1c5d12a3979b1808ae6fe4fe11002365daed180628234fd","first_seen":"2024-12-23T14:25:46.401305Z","last_seen":"2026-09-04T16:35:28.287184Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/elementor/thumbs/viber_image_2022-07-05_12-18-06-215-prb8t20nvkn12c63pszoc8g0cvjhdp75ga8aq7tgus.jpg","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.289Z","timestamp":1788539678289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/viber_image_2022-07-05_12-18-06-215-prb8t20nvkn12c63pszoc8g0cvjhdp75ga8aq7tgus.jpg HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5924\r\nlast-modified: Tue, 05 Jul 2022 09:36:46 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:38 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5924,"size_decoded":6335,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 130x130, components 3","md5":"13fee704cec213caff8eca18f220b4ff","sha1":"a64751484bf7f1ef31597aa18c8ca2c7a75b5cf8","sha256":"98551ecdd111727c9bf64f6324b64c6fc28e20f0437c8dcfc54b2567c2376d00","sha512":"a2cfdebb604dce8e7b65b0ea09e09b4348180d915c029ac09e2cf65263ace1d79a1f6f3eb5fc2f4f7ed35cee1b0fdd483597e88fc1bd3fc71faf683d1697fd7e","ssdeep":"96://E+hec58pE/sNWyXZEveDGBWxuPWtSPwK7QdSNaynJ1RsOTh7wmSCdsBi8kSM://NhecN/sXZEmKBPPt7SOaoPBmq8kR","tlshash":"bec18d235651db128d89898a380c66d940aebec2bd53b3212a30dcc31f032cb0c729b8","first_seen":"2024-12-23T14:25:46.405754Z","last_seen":"2026-09-04T16:35:28.287875Z","times_seen":4,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:50.087Z","timestamp":1788539690087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://gemini-project.eu/\r\nOrigin: https://gemini-project.eu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://gemini-project.eu\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 16:34:50 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":525,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.265Z","timestamp":1788539678265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 20 Aug 2026 03:08:04 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5107,"size_decoded":2286,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-04T20:04:09.74371Z","times_seen":5693,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.7","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.241Z","timestamp":1788539678241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.7 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 17 Aug 2026 15:09:38 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2979,"size_decoded":1450,"mime_type":"text/css","magic":"ASCII text","md5":"b2b463a5bdb73833be2a6afbc1843ddd","sha1":"ade55e90dd7694b7974edd336b555e765967e702","sha256":"a3b9f5df6bf638a4cb583480bed6e18a84ad7141cc3d75b81094f91dd7b82f32","sha512":"431fcb88c720bc2ee3cd950772bbf03194b28f5a00c602287ea4877829ed377f0742dcff523e88e07dd4a7968ea8618fae59b883617d9112d61feee5167ae191","ssdeep":"","tlshash":"aa510264660028504bff92db6eaddb047b6e7481cd1faf97b0c21a7c57782851223e5e","first_seen":"2026-05-15T04:06:26.038056Z","last_seen":"2026-09-04T19:48:36.685334Z","times_seen":24516,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/themes/neve/style-main-new.min.css?ver=4.2.11","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.245Z","timestamp":1788539678245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/themes/neve/style-main-new.min.css?ver=4.2.11 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 13 Aug 2026 03:13:36 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39964,"size_decoded":9184,"mime_type":"text/css","magic":"ASCII text, with very long lines (39964), with no line terminators","md5":"632b4b3a0d9f6a5d1a5aa8745c8e4cea","sha1":"76c3ee8d9b8e93f02bd2081a1871cc8955b70145","sha256":"d17fe67d57d239c9edceeeaaed63c1db46f39fcd56019ff004dbf6beabb7cd27","sha512":"cb0e1ad49d150571d1d909ce20f2fe797c5cea8d9dc46b31504f8ea7609742c8dc13b8309d1c64eb0e31cccb5151333b447fefeb581f20b9a6f1c44dc969bfab","ssdeep":"768:MLB9nzmfdNA0J6TrvuRaWeg3S3MMAy6fuiVQoRpmF8PpRPAHc2te:MLB9nzmFDw6fuiVGehqPte","tlshash":"8b03c9a9a2a0f17dad37b129a7dc9a1c1518f601de134feef661a12145cbff215e0b0c","first_seen":"2026-08-13T18:03:00.461295Z","last_seen":"2026-09-04T16:35:28.289797Z","times_seen":48,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.248Z","timestamp":1788539678248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 08 Nov 2023 03:13:10 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":31059,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-04T19:58:40.415161Z","times_seen":1046099,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=4.2.11","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.275Z","timestamp":1788539678275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=4.2.11 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 13 Aug 2026 03:13:36 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8230,"size_decoded":3468,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8229)","md5":"d9af54187a59db7a1783ac555215e72b","sha1":"5ae07e4496c491fbced16c302e2b9c1f9265aee3","sha256":"052d5a6abf5db38176aff8d62f5057dba9975b2d07eae1da6bed75a857304fd1","sha512":"012b44e951730eff2446c7ee34f11855e777dcf089b9f1b60e353805016d2b3a3b6829eb7f67341bcbc2070a491a32a16a263c0da4063629306b29e2897892e6","ssdeep":"192:oGaeyWYzN0AmADwy+wfOuSEKM1SJf9JM74KqLQWpVXha2B7eXvTSLSa97hRguX:oOyWsN0Am0wy+wmVEpMV/M74KqLQWpV9","tlshash":"f002a8656125707201ee0aefe2faa7c5373234efb5074055602c8c6d2ea9cc763a5df6","first_seen":"2026-07-23T01:01:51.956013Z","last_seen":"2026-09-04T16:35:28.291307Z","times_seen":110,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/elementor/thumbs/albania-2-pjle5buqkoqikfaxug2dn4xgy1jkvi4gvwzhdxcbdg.jpg","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.294Z","timestamp":1788539678294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/albania-2-pjle5buqkoqikfaxug2dn4xgy1jkvi4gvwzhdxcbdg.jpg HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4696\r\nlast-modified: Wed, 26 Jan 2022 22:37:49 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:38 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":4696,"size_decoded":5107,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 130x130, components 3","md5":"4e2f847ae48dc436860964bc143dc3d3","sha1":"4c7f8ea19dc9dd57f238eafa2e7e2981f75f6a2b","sha256":"9f7262307114313c425747c4f88744a51581282a7737e534c60eb21ccce675bf","sha512":"28e47e83b6dcb3d2741337be67c5206748467422a3d465436a9d6e72e2782af96852e81fc67085da7fe6e7c2362169ae429c76deeb9bef031676a760ea94fbc0","ssdeep":"96://E9xI9rroHjqgFd3BSgWkf2i84rLM7xEhLUUsKsWqGnaKi://sxIxsDb94xkd84vM7xaUwan","tlshash":"16a15b5ab750d1f0ca0ecef88e872cce775e0f0550a52eda8670c355fd601f205a894b","first_seen":"2024-12-23T14:25:46.412693Z","last_seen":"2026-09-04T16:35:28.291828Z","times_seen":4,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/gtranslate/flags/24/en.png","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.297Z","timestamp":1788539678297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/flags/24/en.png HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1767\r\nlast-modified: Mon, 21 Nov 2022 20:26:44 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:38 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1767,"size_decoded":2177,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ec7233b5c80e5db85f7733b2ec25203f","sha1":"d4c36fff06dc7d920b10eb13b58ea9cd9321b430","sha256":"347ee97a492f79675749d03533810ff899ee6a784b4e156f3e0a7613cdfb3d40","sha512":"89e59fa7fdef1f61485176467fd127acf55424aefcf78aca5c3944e59f0b802591587c9d90c4ff158f955b74798e933b41c84fd0d3842fa4600ec8b583c113b4","ssdeep":"","tlshash":"693109cf0b91610bd9cba7827ca71c17366659d422a7be1b4bda0dcc7f85c2ad004e38","first_seen":"2023-04-08T21:50:50Z","last_seen":"2026-09-04T19:40:58.463146Z","times_seen":6646,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/wp-data-access/assets/css/wpda_public.css?ver=5.3.9","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.243Z","timestamp":1788539678243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/plugins/wp-data-access/assets/css/wpda_public.css?ver=5.3.9 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: text/css\r\ncontent-length: 90\r\nlast-modified: Wed, 10 May 2023 03:08:15 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90,"size_decoded":497,"mime_type":"text/css","magic":"ASCII text","md5":"076b9cf89c72c83d46380e8d6c4207b0","sha1":"f9e36713fb1cc733e504026f85dd0077e35e820e","sha256":"bc770011243e9d2b1a735dbe4a8bf6cdd6b60a0968bce0bcb6eef84190efb1b6","sha512":"7c9e5219997305d69fe908539159d341a3f08bd8ecb8ea5943a74541417c857bbd61f75a4e3e178df45d213c8d956aba3225869834d6d665871696158afe53f1","ssdeep":"","tlshash":"d0b0124469b911148220b0c003834195d20a224f9883ce08b142398d2fc8322c02d349","first_seen":"2023-04-17T18:44:28Z","last_seen":"2026-09-04T16:35:28.292934Z","times_seen":971,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/plugins/wp-data-access/assets/js/wpda_rest_api.js?ver=5.3.9","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.260Z","timestamp":1788539678260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/plugins/wp-data-access/assets/js/wpda_rest_api.js?ver=5.3.9 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 10 May 2023 03:08:15 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":671,"size_decoded":743,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f04d40f860686501ea7f7de8896ecbc6","sha1":"3d886cf4bf0e819be275fee30ebb0624de4debb6","sha256":"85df5b8edef42aefe72a8417b6ffeb6e0631e7d151b90844b7f9feb29b36fe41","sha512":"1b8b9c83ff5a8e63ecfc9930403e8960306a03371471e15f27768624a6e602c57b2de55e3943b7598e14a0152a148bbec961887b4b7f4f72f54ebea4f7484f98","ssdeep":"","tlshash":"73012b089e9a120947e873ba882e1ade370cd6a35fa8d8b74a0047590cc0e36cb51a1a","first_seen":"2023-03-29T21:51:19Z","last_seen":"2026-09-04T16:35:28.293511Z","times_seen":1061,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/themes/neve/assets/js/build/modern/scroll-to-top.js?ver=4.2.11","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.276Z","timestamp":1788539678276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/themes/neve/assets/js/build/modern/scroll-to-top.js?ver=4.2.11 HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 13 Aug 2026 03:13:36 GMT\r\nexpires: Sun, 04 Oct 2026 16:34:38 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1264,"size_decoded":1022,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1263)","md5":"35dbbc441215f5e0a685cd1c2c56df30","sha1":"e8176fcfea7d72cff94e306d682b364060522132","sha256":"c22a7f4b31d75827e4c3c859765443173f17e3930373f19420e17b73d4c67052","sha512":"7b3c319553e9e28590aed58fc9fe6395bea5b81efeb6b1693c939491e183d41413783d614696cc85ef6af626d3948c63a69184fd6a8063e1709eb9bd2991d381","ssdeep":"","tlshash":"2a21e2b6b341247202ef66df2167b3c4327690db7542a081052c4dea6d39f7f71d2ae9","first_seen":"2025-11-27T01:22:30.852534Z","last_seen":"2026-09-04T16:35:28.294002Z","times_seen":1351,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/elementor/thumbs/emina-3-pjle5n4sup5yfquk0kxwh2302nzzfvd8xgtb58vlas.png","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.291Z","timestamp":1788539678291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/emina-3-pjle5n4sup5yfquk0kxwh2302nzzfvd8xgtb58vlas.png HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 8769\r\nlast-modified: Wed, 26 Jan 2022 22:37:49 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:38 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8769,"size_decoded":9179,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"d2556f8ace330187e477a74b88cb2bad","sha1":"81492f81124cb069297c188615c2bf3cf8cc959c","sha256":"0373ccf8466b4c717f07303d0d638c6fbb698a3a6e67b71a41142a275adc0b00","sha512":"c70a4e93501d9ea3a0a006bc4d442c396073c15e97387df3b23244d08ba4febc026d7ed652cc997b737da7a6b2281c41c26d63b6f8aa8ce602954bfbe0bb70e7","ssdeep":"192:c2UBFyecqrTW4b51800ukx75vMxmkdJnTv/ekaFh8Yp4u:NUBFQqrTWEiJvMxmkdwf8YGu","tlshash":"da029eb59189f5691b3f2557e07622e8e017a0dee3c3e5c4f85cef906c1be224852ad4","first_seen":"2024-12-23T14:25:46.407431Z","last_seen":"2026-09-04T16:35:28.295192Z","times_seen":4,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-content/uploads/elementor/thumbs/DRPDNM_Slovenia-1-1-pjle5jdg3d0t5b00mjbe7315p4iil2ybky7d8515zo.png","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.292Z","timestamp":1788539678292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/DRPDNM_Slovenia-1-1-pjle5jdg3d0t5b00mjbe7315p4iil2ybky7d8515zo.png HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 8183\r\nlast-modified: Wed, 26 Jan 2022 22:37:49 GMT\r\nexpires: Tue, 03 Nov 2026 16:34:38 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8183,"size_decoded":8593,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"15965708a245f13809b021be39584ce4","sha1":"2ad41293c337550e645402e1255a06d8e42055fc","sha256":"302f127d1aea46015a4c81213b9e304a73f7f426d7971db03b4df64fb4204d3d","sha512":"578df66ecf5b9f7b50f0d048a0aaad6136eba2babcc13cbb6ead525c2c15569a5856ed358d56ed0133df0392281d8a1357087ff6440991991a3ae785ba3e2dd2","ssdeep":"192:Iajvd0JZ8BUiiLdp7p+6Ziz3FmoHb9PBIj1Dj:NvaJaQLdRpDZomQZOjJj","tlshash":"fef1af5812a2c8a91d3eccf928dda06a816905b067359304a7b370fc45dd3f3cbeba1c","first_seen":"2024-12-23T14:25:46.409338Z","last_seen":"2026-09-04T16:35:28.297707Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-project.eu/wp-json/wp/v2/","fqdn":"gemini-project.eu","domain":"gemini-project.eu","tld":"eu"},"ip":{"addr":"5.39.70.116","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gemini-project.eu/","date":"2026-09-04T16:34:38.366Z","timestamp":1788539678366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.melgefsis.gr.argoadv.gr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 14:08:10 GMT","end":"Wed, 28 Oct 2026 14:08:09 GMT"},"fingerprint":{"sha1":"56:A2:8A:04:D4:3E:00:AE:AE:80:1A:7A:D5:57:6F:DE:6A:C6:DB:83","sha256":"EF:03:1D:3A:F3:FF:6D:80:DD:A3:96:B9:5D:D1:F0:99:B5:D6:33:C1:F5:DD:08:D8:F6:A9:0E:FD:03:44:43:92"}}},"request":{"raw":"GET /wp-json/wp/v2/ HTTP/1.1\r\nHost: gemini-project.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-project.eu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 16:34:39 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex\r\nlink: \u003chttps://gemini-project.eu/wp-json/\u003e; rel=\"https://api.w.org/\"\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: GET\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nx-nginx-upstream-cache-status: EXPIRED\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":200520,"size_decoded":13756,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a8b84214adb08d70b94fdb2b1fd3da80","sha1":"d68d4b53cddc8edc3669a4238aa9334335a9cbd5","sha256":"0294b6a802f65929350aa0000d1b66c246b3d751216d6fcc6b6d3ceeca6b1e0d","sha512":"856ba25dc220b6a02675c82c849f7bc9083423ae69a3f8596a1bd739a5847d985860e4bad04478df311fe4d3dd8940613eb65cbed6d46dda9f4affccff1e9ec0","ssdeep":"3072:SDZnuvs99PNYBDtqM1g1Cvmwcgs/3psp/ksRFHsb/4uSXtiAcDl:WbDl","tlshash":"951432100d48de3e5ace4391bdfd6a0ac439532ae2d4bc14dce6843c61df6e696b731a","first_seen":"2026-09-04T15:35:03.096324Z","last_seen":"2026-09-04T16:35:28.298453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"gemini-project.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"gemini-project.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}