Is booking.thecoroffitness.gr safe?

No. MalwareAnalyzer scanned booking.thecoroffitness.gr on 22 Aug 2026 and returned a suspicious verdict with a score of 22 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.

How was booking.thecoroffitness.gr checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

booking.thecoroffitness.gr - suspicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned booking.thecoroffitness.gr and returned a suspicious verdict (score 22), categorised as credential-harvest. The page resolved to 188.245.49.120 on Hetzner Online GmbH in DE. 9 domains and 4 IPs were contacted, over 40 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 22) · Confidence 34%
Scanned URL: https://booking.thecoroffitness.gr/
Domain: booking.thecoroffitness.gr · IP: 188.245.49.120 · AS24940 · DE
Server: nginx
Page title: The Cor of Fitness - Είσοδος μέλους
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 20 05: · subject CN=booking.thecoroffitness.gr
HTTP requests captured: 40 · cookies set: 1 · outgoing links: 10
Scan tier: standard · observed 2026-08-22 08:25:25 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post
Certificate issued < 48h ago
Matches phishing-kit family "Meta / Facebook Login Kit"

Detected technologies

Nginx
PHP
jQuery
Bootstrap

Contacted infrastructure

188.245.49.120 - AS24940 Hetzner Online GmbH (Germany)
142.251.154.119 - AS15169 Google LLC (Germany)
142.250.207.3 - AS15169 Google LLC (Japan)
142.251.222.3 - AS15169 Google LLC (Japan)

Observed indicators

booking.thecoroffitness.gr
www.google.com
www.instagram.com
www.facebook.com
apps.apple.com
play.google.com
gymbooking.gr
www.gstatic.com
fonts.gstatic.com
188.245.49.120
142.251.154.119
142.250.207.3
142.251.222.3
https://booking.thecoroffitness.gr/
https://booking.thecoroffitness.gr/css/style.css?v=23.83
https://booking.thecoroffitness.gr/assets/bootstrap/bootstrap.min.css?v=4.5.3
https://booking.thecoroffitness.gr/assets/datatables/dataTables.bootstrap4.min.css?v=1.10.22
https://booking.thecoroffitness.gr/assets/datatables/responsive.dataTables.min.css?v=2.3.0
https://booking.thecoroffitness.gr/assets/daterangepicker/daterangepicker.css?v=3.14.1
https://booking.thecoroffitness.gr/assets/fontawesome/css/all.css?v=5.15.4

Questions about booking.thecoroffitness.gr

Is booking.thecoroffitness.gr safe?: No. MalwareAnalyzer scanned booking.thecoroffitness.gr on 22 Aug 2026 and returned a suspicious verdict with a score of 22 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.
How was booking.thecoroffitness.gr checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of booking.thecoroffitness.gr

Scanned on MalwareAnalyzer by Cyble · Open interactive scan