{"report_id":"22fd8d50-09ec-4c8c-b1aa-54143dcca503","version":6,"status":"done","tags":[],"date":"2026-03-09T12:53:22Z","url":{"schema":"http","addr":"cr-nicos.com","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"title":"ホーム｜NEWS PLUS（ニュースプラス）","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cr-nicos.com","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T12:53:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cr-nicos.com","ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2026-03-06","domain_rank":0,"first_seen":"2026-03-09T12:53:24.882001Z","last_seen":"2026-03-09T12:53:24.882001Z","alert_count":268,"request_count":67,"received_data":792534,"sent_data":48265,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Snowplow Analytics","description":"Snowplow is an open-source behavioral data management platform for businesses.","website":"https://snowplowanalytics.com","common_platform_enumeration":"","icon":"Snowplow.svg","categories":["Analytics","IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"823fe59def96ec311cdca30680508664","sha1":"511bd4cff2793bae5d02837eef4d9c85adb50a85","sha256":"d320de6571a9ad155aca9f4557b7f05de2490f79b480c43bc412175d32b7bcfc","sha512":"fe4f7bd7206aabc608988bc0cfa86a24b0471faf7aa8b4db37a87dfb23d231c0e7a875492dff45dd2a09a98a8bcbd67ee58b1680746a61abd3da90be53469cb8","ssdeep":"","tlshash":"12b09b8437876410d37625281c35e55dd8d40e5e318d8d4cf17451433d254544b55979","size":125,"data":"","first_seen":"2023-04-12T22:14:09Z","last_seen":"2026-08-04T08:16:52.113321Z","times_seen":1593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"b94e1fc7a07df267cb5b799f64e85a69","sha1":"b716682baa2aab967a1b000015494d8bc7567509","sha256":"f42f1ba13b83c4dd3f9c81fb7d2fe7e1bccb0b078dd846f8b49861c85f205c60","sha512":"9a73f51f802242780b86c01e8a932c199b360cbd0cb91f3a8f7132b8f3a2b2c5fd613793d5905ef1208b5e0f6b1a9b9c15d2201350082a794e7a9a80678e076b","ssdeep":"","tlshash":"fad02b9255c10833d03f02a04c0f6d8b74401f5f6964d947e52462627ae5d9116dfcac","size":281,"data":"","first_seen":"2023-04-12T22:14:09Z","last_seen":"2026-08-04T08:16:52.209282Z","times_seen":1967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2877ece44c921ff47758de9a04f04408","sha1":"661d7fd0481a5056ccba1e26b2b7de3bc2fd8609","sha256":"880cd0285d5c2355184950947d4ca6cc52cae08ef677e89027fe8e6f32bc4797","sha512":"cd5a418931a3214b3fba2337d776dd608978ee17d2f52293c06cd7d5b8c431714ca020b73831598bb602ccb3ec2d4c77cd8b5773dc767d6f7545b8403110f665","ssdeep":"","tlshash":"56f0129043b79f932cb5f3a74c1903842cbee99f4eaf84676105cfc91189588db5e508","size":458,"data":"","first_seen":"2023-04-13T07:41:12Z","last_seen":"2026-07-26T11:04:15.519546Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"b6a1a6503c100591b3afd59a3a943667","sha1":"b686a61a431a79083953a8f1e9572da678f0cd72","sha256":"3770595288d6255d0f56da26e486ce0b12baeb55105a4f660c16550fc91f7b0d","sha512":"2cd36d766b0ec06a3a7c63eb8a92cab9586db3126572686f436d4ccc62524a1813b91240e2ef3de93fe09f23ada8daeafccfa25d3f1beca306976103e45cceed","ssdeep":"","tlshash":"91c0c00cc0c7b214037061e84cdb35280044055101559fbbf0e59414685068377bf4ec","size":179,"data":"","first_seen":"2023-04-13T07:02:46Z","last_seen":"2026-08-08T05:24:20.641457Z","times_seen":6670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2bb12fe62ebe03eb468c313abf889a8b","sha1":"b78f4bd3b4add8190b4587d84c335f6612b1d782","sha256":"c671ec6c2998c27a84225d382459a50265faba73d4944c97f6fa14dedb24071d","sha512":"13b55ae5fdb8085a12b2263160f3689258a89ec20acf1a9f68ed9be29b8bf1ee76d50228e6cd7e9edc227f54806276ccbaf8ee0d7a640d8b4fe64121e831a4fd","ssdeep":"","tlshash":"c8e02b8c7bc3384dc2415a171130232d7401fefa25c5ca6ef67b85803a34c96c362f94","size":400,"data":"","first_seen":"2023-04-28T11:10:12Z","last_seen":"2026-07-23T02:16:04.013955Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"64f01178f16a91ee455d862f181f0494","sha1":"3af3e252c48eb66940118931808ae541f48932a5","sha256":"bd9491cfe25bc7e9f4a49c43a07a2473ca2164b8ceb302f6bc9018710551e27b","sha512":"8fbcf2b43ee6c2d75d426e9156bf9d7351cb7e70b22467d4ce4b23de4cbe62167adf184c19d60baa8de4435a5d0a641d1ad6995e39799b77661f1a92bf972d28","ssdeep":"","tlshash":"27b0925412a22404c0a60ab422b72a810566bff804d989a4967eda193ea0891011a9e9","size":112,"data":"","first_seen":"2023-04-28T11:10:12Z","last_seen":"2026-07-30T11:02:04.91368Z","times_seen":333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"26bc31e12628b8388c3be44bb175d592","sha1":"9464185aa11d68ea75e8d6495ff7b02ec3b4f1ad","sha256":"b4829119269f7853888d67440f0424d68bd7a7f3d6a85b408bc5260b7953fe09","sha512":"4c2b63d1616648758499ba9674263b101a4f03c0f2d7b6671267632982069a9ededf8182a1656e2d1352e7d17d5f8875b31411f21749d3b91bb55c462b22598e","ssdeep":"","tlshash":"64c08cc822a2027a8e6b09d108e8180d48b10f501c1120f2c0e0e98014c8ad0629fa0c","size":152,"data":"","first_seen":"2023-04-11T21:25:23Z","last_seen":"2026-08-08T19:59:30.634771Z","times_seen":62320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"87d1d995f8af8357ae5fc24d2612c85d","sha1":"9b75152eec53b4326aedb34c95a0e71eb725eb3e","sha256":"99dcf6145ad75b52c454bde52e53887dec657bad802f96e3c9022d5e2eaa13ce","sha512":"ef7864104f93372df97d0aa678b0713fcf45089327c8ab352a436ad38b9189c0b61504328413b15c291be80b22b030064c1d795094c1d86e9adffdd468f63a58","ssdeep":"","tlshash":"08e0c202af801506b691603706b79a8e60a0962b589286d0b821f41f1e385bb6a2daac","size":294,"data":"","first_seen":"2023-04-12T22:14:09Z","last_seen":"2026-08-04T08:16:52.166884Z","times_seen":1924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1f0f18e91af8a2a3b7cc65ddf1950f82","sha1":"897345b95c2c1e423fdec8a4cf08509f1af8dbc3","sha256":"51b55fa8689c49f06e841c0f118b9877ffbc924e7f9e61a4747f73c8bcbbf1ce","sha512":"e3ffb4d68ff70b3c3bceb6725e0ad4aaa82d6c90c2d00dccbfd5077996ffa08acdb8c608bfaeae5202e78d7a431a5717e7f9b7bf2b6b5eeba8bbac7b44a0d55a","ssdeep":"","tlshash":"14f04941220f5a7722b456f32db949840a930e842c9078e2c19a56c3a8f0dc5251fdb2","size":652,"data":"","first_seen":"2023-04-13T11:49:18Z","last_seen":"2026-08-08T00:39:42.350698Z","times_seen":2632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"e480511aa0877b44c194ae8d956bbeac","sha1":"89fab2c13ec27233e4f3a25aae1871ddc29eb436","sha256":"1008c0d1f25bc12ab18ef2a551d221fdf29ba3719b4285406eb67f048409d374","sha512":"d6f86dbc0191e4a6807e76da503ea03563cbe0973c2a2d2a130117190ff521a7f83cb3bf80988b9ea0ceff8ebb148578e3b7073bb6b4b7c05dc20d5cdbdc81d7","ssdeep":"","tlshash":"33d0c2a142a9100bf1a701f84d2a2740c17c1938695ce24e6f1af5648990d7109b78ff","size":286,"data":"","first_seen":"2023-04-11T21:25:23Z","last_seen":"2026-08-08T16:52:54.1486Z","times_seen":43382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"85609b86905df9bccc11a72345b66635","sha1":"d7006a8416a6ef6d16fd6484b6fa38296b15b22e","sha256":"58274da93fff8551e53d068df7d857472b65a02ac4056ab56010517e120d47ef","sha512":"d7b45221d91dc9c21a66aa247721a69e6bb76b6f1684bd7823836e423782dbeefef87123b2dc9bfdf0545b2a630f85c39475eb85776a6796db7a4fad15009bbb","ssdeep":"","tlshash":"259002882058104190125660082ff8490191553414249c441114d8515d9156822075ac","size":45,"data":"","first_seen":"2023-04-23T23:55:24Z","last_seen":"2026-07-23T03:41:25.640522Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ad647657a6182865673fe2300a1d13ad","sha1":"b1d7352ec14223bdae58961fe3ebab2ec990427b","sha256":"9f500ac02daa86fc846af97dff1b0d92a41654db4a3548dd90574e5e70c28cdf","sha512":"7251d3e421e49649e39c374e19dfa3f7c03ffa741f49f19371d088fa8e8bdc89e85724b880431c6597b7d4b4b08b03cd0e6b3be1d74ecb9f537fe384b5cd841e","ssdeep":"","tlshash":"f8c08c81065260ac89bf09a1089d0c8884620e8008417871c0c0c74068c8ba020afaca","size":148,"data":"","first_seen":"2023-04-11T21:25:23Z","last_seen":"2026-08-08T16:52:54.131729Z","times_seen":17332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/scripts/jquery_prototype.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0126cff91b4ef14fedf57448e236e5bb","sha1":"e127f54870461acdebfbf7d6357dc74c1072bf88","sha256":"1209c9c2014d139f64ecc31458aaf3949c0194e40999ff6562d9294703d11f21","sha512":"6a09561c90f399efe579772bb341fded0a47f821e94b1e71c8639cc1c91bc42020b48d485536bbf3cd1e59bce5a385f3d4d4ede37b341ae6fbd621355d3564a5","ssdeep":"96:tFborfH2WueJnBdHg9tuhEogJXoyhUpmnMqUtYwdxiK9:zgfH2W1dHJoXJ+Exlud9","tlshash":"6db1009cf78c712a41b3305aaa7f15cdb03d9133691518dbd9e8a9f9687183e811ae3c","size":5238,"data":"","first_seen":"2025-02-02T12:59:32.057318Z","last_seen":"2026-03-09T22:27:34.594086Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"0cbac392589af1fcbf14787cda7a56f7","sha1":"cd5cf984b50c7df32e3e48ac1e8d2997263f6089","sha256":"930ca376fc6e4906020367b161667d8e9a49bc52c212ed10ce98e33bf85d9059","sha512":"8473884ab8affb52df98ed6c2946559dc1ee019f1d6c8971dfefddf11f85b5e7ea468858b140f1b63a4c631f3fd072c0a67f960d84e20525723148232cc213d4","ssdeep":"768:p+nkMb26xW5EQBYZdCfLb8zeJvuk+aKwbj0f+Rc:pNkfLZczb9rbDRc","tlshash":"7cf21a8737961abf16f7b1fb08df400458b3ba170894c076e445d99e2438a87662ffad","size":35103,"data":"","first_seen":"2023-04-06T20:07:03Z","last_seen":"2026-07-26T11:04:15.534545Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/scripts/jquery-migrate-1.4.1.min.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7121994eec5320fbe6586463bf9651c2","sha1":"90532aff6d4121954254cdf04994d834f7ec169b","sha256":"48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d","sha512":"b74a2f03c64e883b9a34de43690429327dfb4aa230a7a6afca8150a16e3d84e98461245ff264c26368d9904562cc34fe219f71f951d364fa5c68c039b76776cd","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLR:srhNyNO0kkMKzFSDdAcIYwLR","tlshash":"2e22c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9d403ab39","size":10056,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-08T20:36:51.913929Z","times_seen":58490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9f9b84db0e0890e1c66fa0e91919a431","sha1":"3960b3fe2ccf215935abe8267886f9b4a0eecce3","sha256":"768f9e2bb867f0958d48e55547d7a2aea785b26a8ec5290d183a4bca3192aad0","sha512":"9171153520827c1a7390a3e6af27632c1b56faae901db7b89f10ca425bcdeade6d9f195b6a8aed8e604aa246c32098da79af75d0e92e1a48a256a73e9a960d6a","ssdeep":"","tlshash":"55e0268411e6286f35f528d6acf02c1481930e8528a214fbd1e9ac012cf0f6a282f8fc","size":324,"data":"","first_seen":"2023-04-13T07:02:46Z","last_seen":"2026-08-06T23:51:47.3296Z","times_seen":4370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"82df9e9642cecf65391c0b780b2eb2e1","sha1":"6138ca2afb7b112d641aa21f926444adbd522dd6","sha256":"2c12c05af68c8b35256d6c2d29328c5f310ce5ddbb4738094045bcebda891e77","sha512":"fcb4027155b7892a172eb0a322c8f12daf4bdb7505320c7e7c281a870a5fadf4e3702df1a7a8cf646d21b2ef6173a9240267460ea8b976bb9bf64942d2a6ad88","ssdeep":"","tlshash":"f31123d462b01745eafb572411b467427200e07a08dcf2a1f8acbdf43854857ab3d739","size":1094,"data":"","first_seen":"2023-06-11T19:58:19Z","last_seen":"2026-06-22T00:05:26.629933Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d9b1825cea8072a7b61a4f5d6cd833e1","sha1":"e85da222304146c0e868db75a097e37d138269e7","sha256":"b7000e18f84052d494728bd24975026bec8363fb7945649d1e40b5f770d7101b","sha512":"7c0423d886cd472a96f4189ec61057160d08e9c838877591466ea3034a6c012ded88b087e1bce499e62c40e15650ae9314c12418bbe5f55b59a2f76e130bb3cc","ssdeep":"","tlshash":"98d023511340bf0f04d5424ed2c6802711d45194b1458cd6a020dc7434584f05d055f5","size":203,"data":"","first_seen":"2025-02-02T12:59:32.070021Z","last_seen":"2026-06-22T00:05:26.621698Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"130f95f6ce24ae929ddee61c6ef38f96","sha1":"088af9d581accbab66b63d0376eecb3ed32415fd","sha256":"c0396797a1b7a2d3a0af63e5d3b1b71c401d20fa90803c5d4d24b27077b4ac43","sha512":"d3e48fdde42620fd4d9aa29232b48411118a1fbc01193fa66b2119c2ee3e3bf640b3de6843b5408c34dfbc649fdc00cc9c5100b8f64f89a26167aae8a9139be3","ssdeep":"","tlshash":"ffd022cab3d73303abf834ea4928144411fc2c12cd484b4aa514d47702296a083bbd6d","size":201,"data":"","first_seen":"2023-04-11T22:12:58Z","last_seen":"2026-08-08T16:52:54.149995Z","times_seen":5258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"791f9a5939233a39dea134042c4fe152","sha1":"bcb816b2f466dcc682ae76924fd95247217631b2","sha256":"a15de7d1cbed5296ac3a0c656053dacd47e39fe3c022afb95d1329661c1ac482","sha512":"b55e46342c353e3a250f96410aed79fed6dc9174dfef6a592abdbf7ed1478077556c49424b1afbe18abdf2474e9e2b20aca7074886b86e4773c3e7c54347c7d3","ssdeep":"","tlshash":"da700008200a00088030ba8aa22a2b203800000000002a0008220000200000300c28a0","size":18,"data":"","first_seen":"2023-03-08T03:38:34Z","last_seen":"2026-07-02T09:47:07.263254Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca997609de564465bec7b805787cb9d0","sha1":"d8609b6e5fb6b9987ccb9fd93b1b6710ed7ef239","sha256":"78e5bf271e624f44921532f1ee0cc27a3843791a9f54ffb8c0c84a5a56a798f2","sha512":"cb27b1928db00dd8ea9854f69da945a7744e312a4349253eda1b856f80f9cb75de5bd285096247d3efc871871d29a7846444a19e9db8d4d4ae09263234bdedbb","ssdeep":"","tlshash":"79b09286230f01b416e85b71c185bcd18a5f1e5c2018cdb92c759a480a8168c22fba7a","size":128,"data":"","first_seen":"2025-02-02T12:59:32.027876Z","last_seen":"2026-03-09T22:27:34.665857Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2323873e1455445f535ab3533fe0ff67","sha1":"53ec09bb10e62a3e90dfa14483f6d620d8c1d1cd","sha256":"6eb970deaf6d0db78954936b943e44f5069b6fd2aca7a28e3c24e58ccd3ce0cb","sha512":"8933d0ad23f2f5c1fa5ece566aad3170004d20eca25eff5b5814eeed01e8a21420bd2ff21a3330366b2ffe8da0df7ee008f10b2720ac9d78714cbf5e29dc3f2c","ssdeep":"","tlshash":"5dd0a736c87268d804333165697fb3ea223f270af8f60e088ba90420f4da3346a0353d","size":235,"data":"","first_seen":"2025-02-02T12:59:32.035945Z","last_seen":"2026-03-09T22:27:34.66665Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1871a347459d5ebc3360ca971e35fccc","sha1":"306bfaad162ded9a44232300c7cbc06fdb95ef25","sha256":"bca568a8ad2d9eb416c0e750628b372ace639af8cca1a596cb73f829cbdd7356","sha512":"a2b26c559c27a478e2824614aa96578e02754e74974b3e9487a2caa342efd349db63e459a03e8dfaf903f03a661c4e7cd16643b9b011468e6a72b0573a219c9c","ssdeep":"384:PHbEbIi0H3qPpXjyGDzPcWMkp22wrjtELpDwNsINynr7vMkp22wrjtELiDwS3INl:P4Xnpm5c3RqNVTRU","tlshash":"5be201677e6e42b84ddf32b2d2fb6fc8b87884166891fc497c1c5a240f14ed432b5a64","size":32940,"data":"","first_seen":"2025-02-02T12:59:32.039681Z","last_seen":"2026-03-09T22:27:34.667461Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"07c8f2df85146728758bba2acb9762b6","sha1":"c9c3e2aad7f0369c151aaca5515973eb6734e6df","sha256":"3ddfe32d72c061f1b02a628c48d5d3181ed03d874e456611df03883b873a8430","sha512":"6902ab720c82a3913ff55b357bce113543bc305f561dd6bf0df4c11b2e46432744d40cc4875792f2babe8ffbc8af8132988a3e20528fcab56c3f05f65554ca08","ssdeep":"","tlshash":"5ec02bcf92c30018407ce4fd37241cc6a5242f30004c4a720008ffb024709b0472ed3e","size":139,"data":"","first_seen":"2023-04-12T22:14:09Z","last_seen":"2026-08-04T08:16:52.139607Z","times_seen":2107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1687cf92d66cae77fd8e1599953895b2","sha1":"aeafe0b78c607cfd9a78579082104c7c9258118c","sha256":"be204471317b5c02b054dbb37e09e0c39700b105527ab442849af513486d820b","sha512":"e6e9d721812c39ad2edc8b423a62f96fb241de4fd48ffac409f8f5b65a819613b697cdd54b203a8538b9e5c8e82b730da28f532f0bcbde2b64392d8b1a3006fa","ssdeep":"","tlshash":"24b011ac20c3cc00a3023aba82fab88a20288820032ea8203c00b82c0ccc020820a2ac","size":89,"data":"","first_seen":"2023-04-12T22:14:09Z","last_seen":"2026-08-04T08:16:52.220085Z","times_seen":2041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c3d74aa3c89fa7983fdecbbb16512119","sha1":"234e76f1bbcc7772a640b082445197415122a673","sha256":"dbb03fa19ed5bf760bc5c0574bb5ffa7f4002963743411440da2dfcab38bd7d1","sha512":"60c2b3015b12f32d86721a37b7e79ad672450de8671c5de705048033649967ba8e50a5404ce9612f801c7e281381917d6fdd9a442a8f69c6774b91db4acf10a3","ssdeep":"","tlshash":"60d0eb487a894c8206ef236c1833ac4efc8b181148018e6050e0ec6f3fa0f2061322c9","size":280,"data":"","first_seen":"2023-04-11T23:08:33Z","last_seen":"2026-08-08T12:06:11.683603Z","times_seen":4163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ad647657a6182865673fe2300a1d13ad","sha1":"b1d7352ec14223bdae58961fe3ebab2ec990427b","sha256":"9f500ac02daa86fc846af97dff1b0d92a41654db4a3548dd90574e5e70c28cdf","sha512":"7251d3e421e49649e39c374e19dfa3f7c03ffa741f49f19371d088fa8e8bdc89e85724b880431c6597b7d4b4b08b03cd0e6b3be1d74ecb9f537fe384b5cd841e","ssdeep":"","tlshash":"f8c08c81065260ac89bf09a1089d0c8884620e8008417871c0c0c74068c8ba020afaca","size":148,"data":"","first_seen":"2023-04-11T21:25:23Z","last_seen":"2026-08-08T16:52:54.131729Z","times_seen":17332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/common/js/common_sp.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e155dbeb3aa721c3e7e0eb82c90d4824","sha1":"c03b0b68216b024e708ae10c423a9d2568985a94","sha256":"2b09cf2c3cc0492b7bced2129ff2530380d4ad3c2fd925ab43a2b81697898b6a","sha512":"327287ef86096addcd0f7bf1e75a16686d3c1267e94f4180c75ab6135a3f545bd17115603e18329f955636c84b49e5f6e777b1521006945658e8b68d9fa0b890","ssdeep":"384:hNMidEZiDz1UHy3vvxkZFBjsAodUw7cAYxFnMIg7n5h6WWUKAuBdbd7HvJgcUyDm:bSSfpcsOPAGFulh6WuPdjV3Yj/hpCi","tlshash":"9ae20914fe4c30dd16bbe0b8a03e519af03a867a50014c9df867c4ea4d65ea121bff79","size":34187,"data":"","first_seen":"2025-02-02T12:59:32.059611Z","last_seen":"2026-03-09T22:27:34.622488Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3dcc08a9a8b2f5ab9b76b7ef73678947","sha1":"af5f2884ca3c8de9e634f5aa346dc07433f9f77e","sha256":"4f0541bbc8c7356e60295f2dadeda200d8294fe587220736acf2669b6799152b","sha512":"9fdee6ac19b3e3329f6855eaee9d98c5af761b6ae0103d20cfbca381df5132f64f32a243ec572fae4e33af10fec04584f4517d9819f09b5aae05f22242c26359","ssdeep":"","tlshash":"b3a0220c800f3e8c00cf03330082a0c0faa2008eac322c388f0ce000038330203fca8e","size":81,"data":"","first_seen":"2025-02-02T12:59:32.047481Z","last_seen":"2026-03-09T22:27:34.672658Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5ac7da5301b7e448271c0750dac761e","sha1":"71bcd37ebd2679ae78f381e52cbf31013c607520","sha256":"20355dd5abd51ab1af1529118d3e651d171ef6c331348bc35062fdeda7cb4c84","sha512":"cac973db6c7fef5c607e5b51e817416d69f0322023055437d1c08c3596a3aafa8381e7423448fa0ec24bccf36e88426633e453fcd784ec8e8c5a84b963544e1a","ssdeep":"","tlshash":"0b800008e02a828e088208f80082a0208883038fa02028822e0ab22820a38800abcc82","size":32,"data":"","first_seen":"2025-02-02T12:59:32.063994Z","last_seen":"2026-03-09T22:27:34.673487Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d40699eeacabfbccac525cc1bccf21d6","sha1":"e314dec4ae4c1b5672c12f9b0a7ff5acd0ff089d","sha256":"5c5d15b6102f61a5610f1be479037cfc72797dcf7c7dccdb7dbd833c39df2630","sha512":"dd51aa5d1690974addac7e0ae547516496fd290db84f72efa98459e8f9da708878098460e4e08562074514421b34becb033592c4ef2be32735a87f3cef84ea5d","ssdeep":"","tlshash":"532168c87fe62efe24c763d8abbe8a00b1f9366e1821027115069c68556dd104dbf5b4","size":1251,"data":"","first_seen":"2023-04-12T22:14:08Z","last_seen":"2026-07-26T11:04:15.566238Z","times_seen":1347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"e9c24d3cb85655024fc01378571f0515","sha1":"202b239e8c6290095980c954fb29bd91c03b9d67","sha256":"97455e14a6c41b68a77d63b48f8522afb2d06fd6a6ecac73d14af6f24ea218d7","sha512":"b92a010b497b4a271130cc38fa4272f98f8ec3c90641d0b82a63f80c9c70ed4e1f81cd8a458a5348e204054e28e8e63805a9d1248663513fab9208056b298a79","ssdeep":"","tlshash":"40b02b4000b74c20415071f60839280003422910188e8478d0bae0a129c0460031a064","size":127,"data":"","first_seen":"2023-04-13T07:02:46Z","last_seen":"2026-08-08T05:24:20.651247Z","times_seen":6697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"86d20d635ea6d2f29afb0e4afee7b9ad","sha1":"a8bc485cdee0e139eb09e16444801efb1c2dbc20","sha256":"90e3ee263723d8fcbc67e682c59da6a349f9d35341bbcf289774a1653796ff1a","sha512":"c0cd07318d643f2dc2ab1dff8cb4a818402e17d5c869d2d222ce0e7f89cab70e57c912d83e2b82922273aae9fad114e94ed94db6034e70c5e126a3b8b28d067b","ssdeep":"","tlshash":"1b115c6a5704162fdbe201f11ce8291a78522fc09c7194f2dcdd7f155080ec6219fdb5","size":997,"data":"","first_seen":"2023-04-13T18:58:32Z","last_seen":"2026-07-26T11:04:15.532336Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"325c1d448e411b4831821a43fd6047e6","sha1":"cea72a9df9627d46daab6994e87cb57011009c54","sha256":"eb6b5e6bf4620462d2e2b6e397d4dab8725d9c0bbd7aeaf8dde3b21d08440b1a","sha512":"820e35adb076f1f5fdf72d1e524d97b631c4c8575de654cfefde2745d13f30054cd3536db12056d31d520b6121539cf6ca404603ab99b9a4b6e159eb7da1ceb0","ssdeep":"","tlshash":"66f0595579fa6d42dbf440d71227408122c85ea06c5ca0a6d687fc52b4b34974d94f3c","size":502,"data":"","first_seen":"2023-04-23T23:55:24Z","last_seen":"2026-06-22T00:05:26.599947Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f62e35b09eab5ed3d67008852f1032f3","sha1":"1e6fdf122db114eac58f02e548518ea364671c6f","sha256":"975ea0ee6c001cd9f5c785a7b5f3eaf95d1b243592544ab2c756f8be6a902883","sha512":"f2286eec5065fb4bb64ca7c74d9b09a749f1aa88578565fff1231c1975587d1d38dd841644877c38d8748cb3b7c8ff91bb2560db6089469aa9eff4aa49641112","ssdeep":"","tlshash":"91900204d0164ed915c944b0804491598466014e9d1135811f05222810634c2427cd5e","size":51,"data":"","first_seen":"2025-02-02T12:59:32.066865Z","last_seen":"2026-03-09T22:27:34.675217Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"045d96032bc23cea64e7dd5731bfa11b","sha1":"fc023d9da89994fac7318d5ddf3e22386e932da6","sha256":"a7d156afa36223ca9a49ee060029e588853e9473b658a13708019e7dcf00358f","sha512":"8c2e1e9999d239810e093ada0827e32eecdfd6f7d46237685470d1bfad9207715cc06c4e0a661eaa0dc0fcb4d8aec23603612e11afad0bae0528da814cd66be0","ssdeep":"","tlshash":"bb800008e0aa828e0c820cf800a0e0200c8b028fb02008822e0a222820a388003bcc82","size":32,"data":"","first_seen":"2025-02-02T12:59:32.06837Z","last_seen":"2026-03-09T22:27:34.676091Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"895cd053252dbb22f3e0b456112f5f09","sha1":"d9df3f305318cc56b6a60c27033cbdd6beed0040","sha256":"1b1c8bc24f381b22c628ef0559265ab8ef827778c20150a37766b84b9f0d76f8","sha512":"f58154b7f35f19fc4adb69e8fbb9d4126f33675704d140a630cd77ce55c4e43b592fd0655790f4f773548be175d52a402aef66987e981f27f959cc0a51815166","ssdeep":"","tlshash":"49e0f18dbed430e036d6f2d321eba8091dd505fbd04007928000b61c0d38a166213ec8","size":390,"data":"","first_seen":"2023-04-12T22:14:09Z","last_seen":"2026-08-04T08:16:52.266063Z","times_seen":1613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f65079778d0c2611afcedbdf573e6296","sha1":"47b817060736ea3b9c55e45765a815eea76949cc","sha256":"8dea13e394c63c8340092b1a62226a0a9ac87cbebd364fedd0c5cea3110b8c25","sha512":"8a3c3f201557b1a7a8ac25c595255ea917018457ac1695a856378905d955d602ebc6630fca4e1a79a16d85e5ee3317e3d52882d4628651740d1db56424764b34","ssdeep":"","tlshash":"94c080403136061650f953f1a075610221c63a7084875d1a51b7da016475192215b1d9","size":159,"data":"","first_seen":"2023-04-13T00:50:11Z","last_seen":"2026-08-08T14:41:31.505611Z","times_seen":5112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"02082ac3f9c5b918e6f17e4f980c3359","sha1":"34af1fabf0c43c7a40d9bd2c2d1e06261fedb675","sha256":"29472626ac69f00fcdb65b9fef9fd3458d2cfe1a3e2d4744800230d314fe43cd","sha512":"427aeab0568778986c500642aef12e89b50d7b05feff32f189d69418abb74d5c446e3566df26404dd544a15671621787bb43f71fcf12d7d873484e2a9b7ea107","ssdeep":"","tlshash":"b8c02b9020b27500c0da0ab850b53f402599bffc00c5455b923dc5163c92492411e6f9","size":146,"data":"","first_seen":"2023-04-16T01:41:28Z","last_seen":"2026-08-08T16:31:15.252549Z","times_seen":3615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c8942aeaef911eb3cdd7f78eac2a784a","sha1":"aebca1b420a21505f5419c1e70cff70fd3e8f722","sha256":"0c7c78b6d28bf62638d3adbae4021961fea8dfb633a1f93a6f4a7a952b7bb0e7","sha512":"ddb4646d909d3adf5454475360fa3152411be9e8ab07c3e26770258713c1a3824a00487c7da1f3e1a9b29bd485ecb401ee0f3a9dc0d71a0e88c47785fedc3b27","ssdeep":"","tlshash":"e6b012d0f1d33756c722a1dd096f480cd8ff0f12844a7d69e288d7115c926a112ff66c","size":121,"data":"","first_seen":"2023-04-11T23:04:13Z","last_seen":"2026-08-08T16:46:14.045887Z","times_seen":30753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"b1929ca3770e1b40957107609092d781","sha1":"4e4dc89065c2660c5ab1a46b0706cb6f9b8ba95d","sha256":"4e54143e39a9d32df9a2ef007611c94da3fd95bf1f0f3da4abd9f9d62ba6fd74","sha512":"73660479d7d5d70fcbee079f23a1d491968e7282eaec705d0f474b92ff9fb03e1e49b00eef778522b89367f1f67fe0e7faa300bb294704308c3d7795fbae9022","ssdeep":"","tlshash":"97111260230175ccd2a530b4693a01819321bf760c99e5b5c273e6169db8b2333bcfd5","size":1085,"data":"","first_seen":"2023-04-11T23:08:33Z","last_seen":"2026-08-08T16:42:27.837701Z","times_seen":4281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"44c2a5bfa56e232e02037572090382ac","sha1":"89d9a4d6cd057603aa59b61b2f08de84bdd804c2","sha256":"d710f0beee5e8df11e49e6b99239b8a0dc90c669cbc6906a88c78847742fd109","sha512":"d8808a710e20551cea80193b9f3d06dfd909c715111671772567ee164b25361350ee27a3fb45b663af36cbe4394fed7ab0f6b9c7bde2407561434c4f4ae30aac","ssdeep":"","tlshash":"88d023fd0181554407d118165c41f2c07cff10c7dc141c749c59cf3d75f0a5512580c1","size":208,"data":"","first_seen":"2025-02-02T12:59:32.072257Z","last_seen":"2026-03-09T22:27:34.676934Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d96469c73d153a86db11f63b937352e0","sha1":"bd2daadc444dbdf50a5533cc58ae6a973304301f","sha256":"de8bdad7e714aacd6c3cbacef7fd2d757c148e57a56d5540d6ffa86304d04fdb","sha512":"16b6803cb4d6b909ce382a873dd040fcdadb1459f6f821261ffc58be7841f28cf8b404d32d0f9a372a35164ed55b82bed202f97dc561334fad8583373a6d1643","ssdeep":"","tlshash":"4490029d24cfa4c051a3155e169b588574344ca128848dc18504d5ed5e55073e22d4ac","size":55,"data":"","first_seen":"2023-04-12T22:14:09Z","last_seen":"2026-08-04T08:16:52.16579Z","times_seen":2076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"5fea5a607f6cc6ad0b4d99630f055af7","sha1":"a59a8ef2110cc668de8650bea6c20b4f408eacfe","sha256":"4879200ae2197929c4be263c02dda36f626163165c472268224e09e0494c1e7a","sha512":"77577ea4777acfc90db1f248c5b620c33a08f69a4700cb2bbd85309f130134702089dda88c9305d3dcafd811a4ef91aaaa6874ed612eebcaeeca819c7f84aedd","ssdeep":"","tlshash":"ea412fd1b3a3276783e430fd68cd184040a4ba239ae859879410f7972265b533efff58","size":2145,"data":"","first_seen":"2023-04-13T11:49:18Z","last_seen":"2026-08-03T05:14:11.071796Z","times_seen":445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/scripts/jquery-1.7.min.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"53bc2f0f436686aaadcda71a01a70ea1","sha1":"c7138655047c77dd0aa8444f7a062ae9d7888081","sha256":"f65d8822d029e71e92b71fe282f67c04b308f35ad638193ed05db4545a9aad83","sha512":"9caa895740730d56a471db173a66e005b695b509382f0967ba209bb91a1d8138083f1543203d124803bdcbfcec05071e49cce449fd1d777b121e8c7419e79e37","ssdeep":"1536:YbRdUgxV11T52e7evPJoHG9N5TTApILdoABzD4yff8qeLvHHEjam7pmXSBTncquT:SXr9KN5HaObnNCVqPO","tlshash":"6293e8d9b2d6716383b731b854af5107b136a8aa784c8c50f068d8e4be74e48907bf7d","size":94024,"data":"","first_seen":"2023-03-12T06:27:53Z","last_seen":"2026-03-09T22:27:34.605885Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"14584deeb3a7ec38f73c800206b51f39","sha1":"21abfddf322e25cfe7628771ae020dbeab8dbfa9","sha256":"544e992cb45ee76eb55e63a32728451ea27aa8afbc95436b6404367263e7a712","sha512":"4f7517668a1c70953355c13c16f7ebae6d83c9a462fb9cabfbcdf1598f55837681bfbfd11253492297b3de83160aeb02ba0807fbed658779fb6a4e5e0ff26865","ssdeep":"","tlshash":"c5d097fc084152e203e114276d00f1c2bcf380c7cc003d94e88a8e342288e3e212c9d0","size":243,"data":"","first_seen":"2025-02-02T12:59:32.07355Z","last_seen":"2026-03-09T22:27:34.677771Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/public.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cb5a971c148cc9c321b37099a6a57ab","sha1":"c4b9a13f60514c408e0b5bf39496fb1fc6d57f00","sha256":"161842cd5c9c5a02f66eb1c7eb3d04c1df8f249b2d5a464e422623b6b7f5b541","sha512":"8d009d34c2e98644b30226df124f4d8c636460a682432bc9ee57649a3ad34b255f825285d85bff269bb4a510459c2d93e993bb6f968eb404e3a2d29fef20ec2b","ssdeep":"","tlshash":"4e117b9dfafc146a513334205c7f255b797e70933c1a9d56b9ec50807fac75c50a5832","size":957,"data":"","first_seen":"2023-03-11T20:56:22Z","last_seen":"2026-06-22T00:05:26.553933Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2090ba4c5b8f79d48ef700c6fa94e1d4","sha1":"617533375f26f39a94993ffc4c69bd9b7daaf73a","sha256":"476780fa91fc8678dc3036f1d26ce65f2abab46c7b155938655527bb86aa4b10","sha512":"056216f4c0a476f825d31e2f0d7d772f071bd24670269074b9cb246d925d03613a00d27c3342e0611d6048e04ea22031ac18541dd6ed25c2b60353e5bc9bcfdb","ssdeep":"","tlshash":"7dd05ee923b247b9c76e10e30aad4ac89c621ea57c66393288cea59064d4f5012aed18","size":255,"data":"","first_seen":"2023-04-12T22:14:09Z","last_seen":"2026-08-04T08:16:52.170249Z","times_seen":2107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"8c285d0984bfa58fe51644da9d8296ec","sha1":"f952ccf4cdb236e0430371e79900b7cecc3fc808","sha256":"bdc31695caf1fc9e5d2c9cabd0c8201ff51d9ac25f0e9cef135bf089aaaa7f75","sha512":"ec9e7b009708549cadf96cef72661e4c904f9d6e5a14e98973b7e861c887f890c64cb19098cbac8d74c7e88889a3f38acbd9f7788089a0a5f37c440b038055dc","ssdeep":"","tlshash":"10f05c055190476a09d230f0ecef548804374b001f2408b6c7d31740eea05df66afdfc","size":445,"data":"","first_seen":"2023-04-12T22:14:09Z","last_seen":"2026-08-04T08:16:52.151367Z","times_seen":2097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c6b765280e888980cf84663725c4f38f","sha1":"60c1922f36defcb037a644edaa2a28e92eca3410","sha256":"22daca8a39b1c7ef4d0d087177f35a10a68b53396c4dd5d7d2c05e8ef341a15b","sha512":"f5fe1008dd59ee05ffad68793bad173ca2978bdf045c4fe5f38670359105720dae2134f4536a9a0d72fdda6500911147373b14af4332e08ed2c4e7ce2da40f68","ssdeep":"","tlshash":"9cb09b863343c976561555691c36e50f54950f718418cd45d4a45073b5958574b4505c","size":125,"data":"","first_seen":"2023-04-12T22:14:09Z","last_seen":"2026-08-04T08:16:52.144567Z","times_seen":1927,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"0eacd3b66742133e5ecdd849a5135f2f","sha1":"112304629582a8a8b55af47e6a09d0c0529c546c","sha256":"ace13e190b94ef3ab362bac6dcc11e09a38db5be5f2ed9692252c132522acd91","sha512":"292c566e1e48fd45c9e637e1c2578356b9c50d33011d5b1a9d5e7f5bfae121d668229472682942f1ab73557766f701984f2e11ae6f62ced6b78d81d7f6d86d6c","ssdeep":"","tlshash":"92f097c66b0a60a4087f24ed088848de1d4a0e908c10f8f08ec0dc34b2847e2217fe86","size":479,"data":"","first_seen":"2023-04-12T22:14:09Z","last_seen":"2026-08-04T08:16:52.214289Z","times_seen":2038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"34a8d4acbd49e79a3b57e526dd08c212","sha1":"d4e39399cb00e60edf9facc582ebf6eb9bb7c557","sha256":"dbe2c723f20cbdd2ed6139bd79da9ca78cae1084e7eb13fe58d7260ea8cda484","sha512":"f0cc4830f026d2d33912321b6bfce918c751c860a982e93cbb0be4222a5253956c37d7f5d02803fd3f4a40049d0f8b1c8a63d94dd690600fd9e153cb6526d3fd","ssdeep":"","tlshash":"5ba002d42082a100a2665761903ae84965992a39102d994ad0a4d4926c514e181169bd","size":58,"data":"","first_seen":"2023-04-20T09:25:20Z","last_seen":"2026-08-08T16:31:15.245665Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f65079778d0c2611afcedbdf573e6296","sha1":"47b817060736ea3b9c55e45765a815eea76949cc","sha256":"8dea13e394c63c8340092b1a62226a0a9ac87cbebd364fedd0c5cea3110b8c25","sha512":"8a3c3f201557b1a7a8ac25c595255ea917018457ac1695a856378905d955d602ebc6630fca4e1a79a16d85e5ee3317e3d52882d4628651740d1db56424764b34","ssdeep":"","tlshash":"94c080403136061650f953f1a075610221c63a7084875d1a51b7da016475192215b1d9","size":159,"data":"","first_seen":"2023-04-13T00:50:11Z","last_seen":"2026-08-08T14:41:31.505611Z","times_seen":5112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sc/s_code.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f44cea0758825a089607edfc2b5152ee","sha1":"7d326ef73ff83c36af6a4f07938276b48dac20bb","sha256":"f9c756224c0887ed971d0e2f79a247a3b2296ab19d3a61abe35c11ed356b5486","sha512":"eadf97d8e262d118964e03f25512944acd8d870630178c101af46a866937ed7fb70a3edcca96298db876e71ab35244e206e2e5b52865412830a84ee851abad04","ssdeep":"1536:jmVi6K2Hraa/bAO4OlBsoIjG+qlbKoI8UriuYM99fdzoJq+nf9k:jKyqlbur/YM991kh6","tlshash":"6f931a83f7b9562b02f570f958ab44c5a4fe551b884488affc14b87c18b4eb3506eee4","size":91586,"data":"","first_seen":"2025-02-02T12:59:32.008727Z","last_seen":"2026-03-09T22:27:34.671738Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"15e48e8d50cf9a8924ed4238e1ee9b1e","sha1":"fa8eb2bf89e1a4e3c1562a8ec9efd0aa947e55fd","sha256":"daed108eda16cdb48ccc4454405f69fc471203ef6e27635f4ec52baa8ba8c34c","sha512":"d3bfe2a938e301c6cbeea2e6b28de31cc4a84f195bffa5414f395dcc02e9de0410fa5bc424f8125614d4adf855f13b894fd72ffe4950397f4e34ed125133a5e6","ssdeep":"","tlshash":"bcc02249334502a2aef52cc0006b0d00074b0f6624b4889880c0a9b578d28ad063fcb1","size":193,"data":"","first_seen":"2023-04-12T22:14:08Z","last_seen":"2026-08-04T08:16:52.205049Z","times_seen":2096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 8d3975a07c52025105faa2efdb469cba\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/logo_login_01.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/logo_login_01.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13050\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 6e0cdc7020aef49605faa2efdb469481\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":13050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 560 x 102, 8-bit/color RGBA, non-interlaced","md5":"54234457c8a73eaaee34216f9ab72f7f","sha1":"516ffab3fe8f9db8c5b83ceec6e58b8ff9f6c672","sha256":"d481445b059de143ebe671ccdfb086ba91c38d79304c0f04ead16f946fe3521d","sha512":"a9344899f2f7e216ccf95cd7bdd3573e61b59b3655d604a2bfed69aaf1fe9c1685d35e764625d80c31a27d9c3c0f8a1a9b2526f0974a6a0c98a3afa637550603","ssdeep":"384:7DSQA8SPOfebDJC+SxxcT6TzqwX3QwiRaG+KKE:7GQQ22bjIM4Noau9","tlshash":"5c42df3d528e4aca6288135ca9344fbf4364b32ef9050248975f8b9b48293a0be8085e","first_seen":"2025-02-02T12:59:31.975893Z","last_seen":"2026-03-09T22:27:34.609195Z","times_seen":5,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/logo_login_select03.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/logo_login_select03.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6830\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: d28d407d3f02c4e005faa2efdb46941f\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 470 x 82, 8-bit colormap, non-interlaced","md5":"f6a60ebd16e3269e18afd13f7f8c3c6c","sha1":"656e79d29c4290c365a9969e258247c534cfe1f7","sha256":"460d18f18cd19c012802609aa0746f8e6b0b30e51b88429b17375e063eba793f","sha512":"d2d9d46c1069683f8b0eba413ef27ab57d76c662b7449c0b1406b89d9ccc3b2598d5f09b5c70b1559d696b4b227f9c10e6ae71c2374e9e575863de5629d7f81f","ssdeep":"96:iI9r5RUYImhPP3w8VJO4cZXsuwlVDCMcay9aQPIscKBMGYqYq2+X:iyRpIcPg8VzAcuwlFCbZIs9HDYqdX","tlshash":"29e18daa79464cd46c107d2c347116a0b6336fbf4fe7ed46c08b4a3578db2166782447","first_seen":"2025-02-02T12:59:31.933873Z","last_seen":"2026-03-09T22:27:34.633657Z","times_seen":5,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/var/rev0/00003/63906/campaign_sp_106_106.jpg","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /var/rev0/00003/63906/campaign_sp_106_106.jpg HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14948\r\ncontent-type: image/jpeg\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: c8fff0975fb3ec8405faa2efdb4696cd\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 106x106, components 3","md5":"11115f174dc142dae3200e1dd1f4bc29","sha1":"b224eed4efd5210fc67604142ae79a87c85b6279","sha256":"8330707da30980baa0c8ec32111bd5b4c69aa0d6018ef2c3363dba48179e55eb","sha512":"c2b3c5f061a6031c919705de6d7012e8ed5637a472dfbd7de1a76d197b3342af3a526dee7c8bced5f30d1b6db918553e89c2eb10939bfc11e8a210103280a21d","ssdeep":"384:S69lXYFBr+IWS4CzUYsJBT9urPwmMtOsmDTYWfl:BXwBrfWtjJBT9uMztOxYW9","tlshash":"b862d072f522ac7db85bbed50acb404cdb51db424a449ecc827eb624d5b43401be43db","first_seen":"2025-02-02T12:59:31.96318Z","last_seen":"2026-03-09T22:27:34.604084Z","times_seen":5,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:00.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:53:00 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 50af142803d5a25205faa2efdb469e60;o=1\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T12:52:56.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:56 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nset-cookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; expires=Wed, 08-Apr-2026 12:52:56 GMT; path=/\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 7ee12860405823f736e7283f473eeba4\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":70355,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":67,"dns":15,"connect":12,"send":0,"wait":169,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/scripts/jquery_prototype.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /scripts/jquery_prototype.js HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5238\r\ncontent-type: application/javascript\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 14557fb3f982c4ed05faa2efdb469ec7\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":5238,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0126cff91b4ef14fedf57448e236e5bb","sha1":"e127f54870461acdebfbf7d6357dc74c1072bf88","sha256":"1209c9c2014d139f64ecc31458aaf3949c0194e40999ff6562d9294703d11f21","sha512":"6a09561c90f399efe579772bb341fded0a47f821e94b1e71c8639cc1c91bc42020b48d485536bbf3cd1e59bce5a385f3d4d4ede37b341ae6fbd621355d3564a5","ssdeep":"96:tFborfH2WueJnBdHg9tuhEogJXoyhUpmnMqUtYwdxiK9:zgfH2W1dHJoXJ+Exlud9","tlshash":"6db1009cf78c712a41b3305aaa7f15cdb03d9133691518dbd9e8a9f9687183e811ae3c","first_seen":"2025-02-02T12:59:32.057318Z","last_seen":"2026-03-09T22:27:34.594086Z","times_seen":5,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/logo_mufg_2.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/logo_mufg_2.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5038\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: b58fe203ca29df4205faa2efdb4692d0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":5038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 387 x 41, 8-bit/color RGB, non-interlaced","md5":"0a9f35a533db0308d374dbd0fdba32ce","sha1":"59ee930d3680c98b496c1bfd67d9ecab835fbbce","sha256":"64e9053679d1c2fd9b56e6cf5c33619895e8077d11d5a08910e474b7cfd5b97e","sha512":"2c85bff83685a5f54a1aabe36b6f0f62fba56727ea68180892ec39c77bfd8bbed6a08d10a3f2023bb7ee25cac10016163a8cfc1a88862f1d668b8899d9887181","ssdeep":"96:uh2gpFyO8oIUg2bHdcGJdqeFpgtnaj2rxZkxSCQemuaLY/jy9Z:unp86nTjdtJdqPtA3eLYbyX","tlshash":"1da18ec39d9897518fdb4ad8059a867da5273c6746bca2bd7cccc8bf01cf5c94580a22","first_seen":"2025-02-02T12:59:31.974469Z","last_seen":"2026-03-09T22:27:34.64883Z","times_seen":5,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:58 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 589103234dfd425f05faa2efdb469c59\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:59.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:59 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: ad48cfef142be06b05faa2efdb469194\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/icon_link_arrow01.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/icon_link_arrow01.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/library/common/css/common_sp.css\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1274\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 82562d7aba5a81c805faa2efdb469c83\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit colormap, non-interlaced","md5":"13adcead7c19afbb1286472da66c011b","sha1":"497c669f29b83a70d85996430282e65e008f6de0","sha256":"3c92898ffe68dce1bcf95a550669ed3fb4fc1e6857b572f0a9c50ba84b1d496f","sha512":"61a0f838d2790bf8e7543653a8e44861d28aff5cdec858008accd8beb679b01ea33eef33313077d730fdbfc8704382265aee39b8d6dbb3b38e42c6e0cfd1cf2f","ssdeep":"","tlshash":"b421b75ebc006c0144c8d91124ee1677892b18805dd0f87778cfd8a2adb02f8c98ddcb","first_seen":"2025-02-02T12:59:32.001473Z","last_seen":"2026-03-09T22:27:34.614416Z","times_seen":5,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/logo_login_select01.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/logo_login_select01.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 9015\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 72954170464c726905faa2efdb46901e\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 470 x 82, 8-bit/color RGB, non-interlaced","md5":"9253bea953ea848f633f5497fb485bbc","sha1":"f3dd6b065ed5906496cf33dc43177899e1214d3b","sha256":"7bb7ac524608361cbcd01080be6dd16e590ca907a97a5c774eda0ff538df15cc","sha512":"c99821dea9e5f0bef60797a16edebccbb0ac3d735a4f4b698c3f8dbb5dea285d722a88a92da509df8defca0b62051122fd5e45a83fa1ba5c4986802699ccdf19","ssdeep":"192:o9DjUQt8LPWL/b3PSgS+KmF+v4yU6/C8IxMr5qyvnvCVbfiPP:kDjUQ6Wf36gSL2+vA6a8I60yfvEWX","tlshash":"cd12bff9281ab5c4f64244f4b7248d54a2ee1ca04830c5b4887b94df3db6f1dd565e47","first_seen":"2025-02-02T12:59:31.961533Z","last_seen":"2026-03-09T22:27:34.599356Z","times_seen":5,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:00.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:53:00 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 291778650aeb159505faa2efdb469bd6\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/button_01.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/button_01.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/library/common/css/common_sp.css\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2419\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 8f7270e72bc130ae05faa2efdb469882\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 560 x 90, 8-bit/color RGBA, non-interlaced","md5":"60a9e869c210854ec2d359d82650f0af","sha1":"5e82de0701e30b6f971d43b3e40930e788d182cf","sha256":"b088d918ff133f344355283e1b414d8053f4339862fdb03b203ba3b90467f240","sha512":"114237e3760bfb5764bb94d7a25807393242f961b5a5277e529d8b470d566b764f727a1e157e2dd5dd8675eefff6fbbcbd9b82f8212e3edc1caa6fd9dfda556e","ssdeep":"","tlshash":"35410848ff015e585a58fd661ccb59269bb7040035ebe838a6cfc82316303f6801e7d3","first_seen":"2025-02-02T12:59:31.980085Z","last_seen":"2026-03-09T22:27:34.600481Z","times_seen":5,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/icon_pagetop.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/icon_pagetop.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/library/common/css/common_sp.css\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1128\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 342e66603ce33f4105faa2efdb469651\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 14, 8-bit colormap, non-interlaced","md5":"90779166fa4216d0ee848f7631281216","sha1":"bd06d7fa34b1ca9d9f211eb4b8b959f54e26422c","sha256":"87ca1c624833fe41152ac801742e59c80a7b5719c890fd3771d8c0084839bf8f","sha512":"53b95a3b7d102f54ecf39338944d4e9521fb0daf21efc64f9ab03f4a4dbaea6c67c862aae508bfe077ac31ba4d522a62e4f77502157251f1bcc7bde254a7f24f","ssdeep":"","tlshash":"6f21968fbe806c025189f81114ef4177ca174840afc0e97a74cfe8224d641f6c18b9db","first_seen":"2025-02-02T12:59:31.994451Z","last_seen":"2026-03-09T22:27:34.605034Z","times_seen":5,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:53:02 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Snowplow Analytics","description":"Snowplow is an open-source behavioral data management platform for businesses.","website":"https://snowplowanalytics.com","common_platform_enumeration":"","icon":"Snowplow.svg","categories":["Analytics","IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":70355,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4cdc061cd504ac7b1ce08adea21f68ca","sha1":"f8b2d9d2ce6f63ee37270cc04b04b2b81dbfa078","sha256":"a55141d07adc34207f03a23620c0d95805866803d4d6e5eac997b5ac2f829926","sha512":"6aa094e166dd10c2be88b40aa6b9d09043f0509d963f33d18b7712114df03798c1b2ecfcd2e5499a14c068281778d8457f72ec57bc4d25d115fbe9948bb89ff6","ssdeep":"768:1Euv3YKsVFQ4Xnpm5c3RqNVTRWmXkVCTpq0T:1E63YKCF5eNVdWmXoCw0T","tlshash":"e463d769b79e497904ce22b2e0f77fc8b0af4c3ad952ac44bc7f85242b45ec461745b8","first_seen":"2026-03-09T12:53:29.723283Z","last_seen":"2026-03-09T22:27:34.643802Z","times_seen":4,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/logo_brand_nicos.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/logo_brand_nicos.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 4029\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: e1d5b749d88e888105faa2efdb469de5\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":4029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 30, 8-bit/color RGB, non-interlaced","md5":"8fa7e6c7f94ff4c0551cfa222fe9cd26","sha1":"247fa290edfbfb0b77876b80715abfdfc1a2acfa","sha256":"ae4dda3818ab7310e88bf30ac8d4219c158d832633920028ef56e3566a91d0e4","sha512":"533d8fa32d2aff3a4ae2d86d85d1a37ca924b35be1bd8c8de70629605624616c1b5fa843bbfb95a183e8b2f294292f2dfde6099e0cd66df53f6585c3cb1010f1","ssdeep":"","tlshash":"de814b5aed502a8b4161f4a614ff312bce7604c15dc1f83179ce88baa4653b6c0d3ab7","first_seen":"2025-02-02T12:59:31.935992Z","last_seen":"2026-03-09T22:27:34.595461Z","times_seen":5,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/icon_campaign_need.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/icon_campaign_need.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1835\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 5be3c439f72b982205faa2efdb469576\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1835,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 146 x 26, 8-bit colormap, non-interlaced","md5":"ab0455a66b81b5c3d288d75720f692fe","sha1":"d3bd6e31fb3c6da8943d277c6249314a1cf55cee","sha256":"2833b904d8293a5ac6408a689059600a7d8197abf2125352c1bb087c24c1821c","sha512":"2d109c989e3288094d0443cbd89d9a1d02801ddbcf9213a2f8c689f83460218ef3c89598cfc09e9a9c1508ff48bcbf88d85e3de8c63dcc49c378056e8eb87460","ssdeep":"","tlshash":"2b31e7c9f6c29a807118d21279f9034f49234890d991f7a5b8cf883a14773f44a6cbcf","first_seen":"2025-02-02T12:59:31.948376Z","last_seen":"2026-03-09T22:27:34.603195Z","times_seen":5,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/var/rev0/00003/64777/campaign_sp_106_106.jpg","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /var/rev0/00003/64777/campaign_sp_106_106.jpg HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15227\r\ncontent-type: image/jpeg\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 0c036551b628f3bc05faa2efdb469de9\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":15227,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 106x106, components 3","md5":"70fc2cfa7c36c471c523123575d9d5c6","sha1":"6f972e8ac148b92e4891413424bbb5d1d5215f06","sha256":"9f50ddb0a1c49d3c2ab6eb788edf9ea87a1095157a148b692f215c5e40f093d1","sha512":"8314d9405c9761813b95e2ed138fc3b4b21cd65c86b2e833d25a75340223cb21bd27bb5591fe53e06190d4fd704f2830493e02e48568246d2e335c9686a27bd8","ssdeep":"384:TeU+rQarSXnSIU9o+VqmuDQzFrnUOMehdEJ5V6Y:iU+RuX69zVqmuDIFrGkw5VZ","tlshash":"3462cf03dc2bba51d46955b9ebe1e041ce7ccb187b8fd62188cf5436d892b1224f4684","first_seen":"2025-02-02T12:59:31.968219Z","last_seen":"2026-03-09T22:27:34.647898Z","times_seen":5,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/ico_attention.gif","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/ico_attention.gif HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 333\r\ncontent-type: image/gif\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 211e944322bb12b705faa2efdb469f9e\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":333,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 15 x 14","md5":"eeb8db63869977433910cd98d554323a","sha1":"4c8ab84a7fb91f8aaac786c4030a6645c3be6b30","sha256":"7e81751c2ef1f7b3f82822d215410b62b1428833af62eb1a995b0e5596a30f30","sha512":"f146f0a15fced3f4992c6df42f523af3c968ba330f52e07d4b6740ca42fcc07c072fc5a7ca371cdd8ff5d92699884f522c02c8de41caf15a6e6b58a50abe4fb7","ssdeep":"","tlshash":"1be02bcac6307832de102c7d015db0c548524d55252dfd459dd162f9b6f6e921e61d31","first_seen":"2025-02-02T12:59:31.977626Z","last_seen":"2026-06-22T00:05:26.583079Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/icon_list_arrow.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/icon_list_arrow.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/library/common/css/common_sp.css\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1231\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: b9f4422d3b66a9bc05faa2efdb4698fb\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 26, 8-bit/color RGBA, non-interlaced","md5":"d281561eb1b1f66b4ef1041cbb88ef92","sha1":"4842e05b7f308dc873e3d91889d5a1946a6851d2","sha256":"f9568a4e9c40a870cba4bf4a0b01c9b055900ff015b0615658e11f98c9d1489f","sha512":"74f7ef1ce5858fc52e3988d33fa3f5ecf81ba668ae3c348e166ab46589dfcf2a33b8727e164273827d08f05ef39153372eb622bf5f99440a542571232d45816e","ssdeep":"","tlshash":"6a21874dfd902c461098ed5110eb42a6de2a5080aad0e53afccfc47599751f5851a6cb","first_seen":"2025-02-02T12:59:31.993065Z","last_seen":"2026-03-09T22:27:34.601396Z","times_seen":5,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sc/s_code.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sc/s_code.js HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 91203\r\ncontent-type: application/javascript\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 04f5b437a086574d05faa2efdb4691e2\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":91203,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7267)","md5":"e2faf0f8cabd1f112acd6942cf58c4c9","sha1":"2aa31d93e8f99af003514637d5ca37d7b9deaef3","sha256":"9b913f852d54e6b5cdc6f4f8075e3223f16a81182d17feab607305301b34b3a1","sha512":"cfc886b6689e3d293db07e58c41e07064805da40b8cf35cf3c9818dacddfb0d28973042e8207ffdcffafc934996bdb3abb5a42a6d63acea6204eb7e1c85bf2c2","ssdeep":"1536:jmVi6K2Hraa/bAO4OlBsoSjG+qlbKoI8UriuYM99fdzoJq+nf9k:jKAqlbur/YM991kh6","tlshash":"e2932b83f7b9562b02f570f958ab44c5b4fe551b488484bbfc14b87808b4eb7506eee4","first_seen":"2026-03-09T12:53:29.730808Z","last_seen":"2026-03-09T22:27:34.620446Z","times_seen":4,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/var/rev0/00003/65727/campaign_sp_106_106.jpg","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /var/rev0/00003/65727/campaign_sp_106_106.jpg HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15027\r\ncontent-type: image/jpeg\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 071c565d07a0b44005faa2efdb4692cc\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":15027,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 106x106, components 3","md5":"041badd70a0b6115228cf732cc71c201","sha1":"13fc50b6344384274a3c885ebe3bafe36b2af8df","sha256":"6cdb204539ed614ecd7d7928f47f57b8b2f5f5fcb98242b8f0e937ffcca5f578","sha512":"14b4d815b94a82fb7b9cacee0f08cfafc21447aa9baabf3f61b524119c0256dd1e3e7798a460cf3b14d1af88a6c304759b8b0a16cf19141fde2ad8538bb2c63e","ssdeep":"384:uh9sMNVL1mpkVjW8sCtZ4q6LfIvV8IPuyKwEgFMd2cbrYXoweo0:uPsMHLiktWFeZe7It8VgQB3YY3","tlshash":"5062d00de7d39bf0d4bc197650056c6a8a2f3a92d9640e20d0696df34def2153bd4136","first_seen":"2025-02-02T12:59:31.965253Z","last_seen":"2026-03-09T22:27:34.639787Z","times_seen":5,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/var/rev0/00003/43404/applelogo_106_106.jpg","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /var/rev0/00003/43404/applelogo_106_106.jpg HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8116\r\ncontent-type: image/jpeg\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: b9ff1035610ac48305faa2efdb469c96\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":8116,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 106x106, components 3","md5":"a40d90c44af0cc7ea32b8f4707d03240","sha1":"97002e86fce8bf37f0b3f6d58e0e7d683623f7ee","sha256":"ec528501bb9e0684324c9364c711d3483858c1a739c2c8375582a12110cf5886","sha512":"646391f4f97fdcd9c5302497446373235ac55ecedfad8f87d295dcf6e7d7511ee29e571da61fa2f74a6df0ec2ccabaa08378335581fa113559cc3ed2e9f87488","ssdeep":"96:u/4Os3N26MT0D5MdtbZPAVwzV6MET5jgyU18wChQC4Ldyh196jWf:MYNMtKwgMSyCmCcdyhHf","tlshash":"7df16d5abf17bd42dee2f77404e2d28871c7621c9a83e192649cd35231c52d14f4c2de","first_seen":"2025-02-02T12:59:31.958046Z","last_seen":"2026-03-09T22:27:34.61171Z","times_seen":5,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/var/rev0/00003/64316/osusume_sp_106_106.jpg","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /var/rev0/00003/64316/osusume_sp_106_106.jpg HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3624\r\ncontent-type: image/jpeg\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: bdc8211d1860b58c05faa2efdb469c25\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3624,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 106x106, components 3","md5":"4c1c735c21ac008e8ce25acd0d0e21d6","sha1":"f862e143c965cd1ceaa60463717d6fec4bb33c13","sha256":"5aeb218ed5f9088a7d7c9475a08b14e26b92eb8974b02438045276a4969398d8","sha512":"4554ae9ef101e082bd6abc52ff100e9115a8a28265e199259e314f552c0b1cdf16daf668b09aaf6c276aa6ffc78ae577a0ae8c76c7a2af84b55af8b56572b61a","ssdeep":"","tlshash":"e8712c2d07bf3384d9558830289e1598434adb566fbbe54e02f4f925c257d6b89c730e","first_seen":"2025-02-02T12:59:31.96982Z","last_seen":"2026-03-09T22:27:34.608327Z","times_seen":5,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:59.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:59 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 7934dbe6b92e03a705faa2efdb469fe8\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/icon_login_arrow01.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/icon_login_arrow01.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/library/common/css/common_sp.css\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1151\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: efd2fff8ce772a7405faa2efdb4695d8\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":1151,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 26, 8-bit/color RGBA, non-interlaced","md5":"18dac5c29afed8405cfbb75fd62a5c72","sha1":"24936656528e061385219b73e752d325a210a9b2","sha256":"5dc49330d89682f906edc8e18cb699db8676c2017d5abcf656084548f579fb04","sha512":"649e089d8ec4313f5a8d02aab725db3862e1a0a04356c59276356c29d45e8b69c3d282ea7ff9a2b246040ff739457e46935383ca04bc033e3f094b1c260a2ff5","ssdeep":"","tlshash":"1c2163d9fe402991e198c78228f741179c3a06d191e4f499b5cfcc0368ac6fb40092cb","first_seen":"2025-02-02T12:59:31.999914Z","last_seen":"2026-03-09T22:27:34.630445Z","times_seen":5,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/texture_01.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/texture_01.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/library/common/css/common_sp.css\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5791\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 6dc2eee49875e61105faa2efdb469ba5\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":5791,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 136 x 66, 8-bit/color RGBA, non-interlaced","md5":"9e3344c2492f3349022996768d31a789","sha1":"ebf1bdf0d4cc4f6babfbd2db43845b58f7f6422b","sha256":"79bc259991b9793bcda69013fc5f17d4cfd9c064cb68abf17e69391156199c20","sha512":"fb68b36e3676a484b743bc1ea74b9475e1d77a18aa1d728f4607f843f6d96e2f4a9512e0da25c1acdd591971221be6f924d2b434c5e3c9e67b76c854c1c1d5da","ssdeep":"96:WVjNDI8hND7Pn2YkUDsjFYkSpGvH+L6Lf+Mv7wG8c6iKeblYYHO:wDXD6YvDGY3IGeLffv7x8cKBYHO","tlshash":"99c18e2eaf9168adb3449fa60ddb400e0c3d50c8f84cfd96bd88ac739f452e4418a1cb","first_seen":"2025-02-02T12:59:31.98647Z","last_seen":"2026-03-09T22:27:34.598054Z","times_seen":5,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:59.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:59 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: b5dd8739e4b31b4905faa2efdb469863\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/view_css.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/view_css.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/sp_index.php\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 05a9876502415f2905faa2efdb46956e\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:58.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:58 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: e125ccd455f2699105faa2efdb469d5b\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:58.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:58 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: a1ace05e99d41b7205faa2efdb469abd\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/button_02.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/button_02.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/library/common/css/common_sp.css\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1992\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 5c62705eeb20f86f05faa2efdb469fa6\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 560 x 90, 8-bit/color RGB, non-interlaced","md5":"238abc9de19ed954dae3420e4662317b","sha1":"bf7c9da9ddf12c17844db4c0051daeec05360808","sha256":"cc589052382d0fa5e466636784087d327ba5f12161733856827aca9243617ef5","sha512":"23cc292d84930af2e1661b65ec776b4a6a0bc5897eb948c6d755e0b6dd66c18ab23fa8bdf7f61cc94ba2c4a2dc4be434f2c7bd54866b644dcb59701168862798","ssdeep":"","tlshash":"4141b679f7442840a2b89ef824fa421bd82b5495abf6f0b794cf840398352f01d598cb","first_seen":"2025-02-02T12:59:31.989057Z","last_seen":"2026-03-09T22:27:34.649769Z","times_seen":5,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/logo_brand_dc.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/logo_brand_dc.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3173\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 39515eb0e54b8ddd05faa2efdb469bac\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":3173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 44, 8-bit colormap, non-interlaced","md5":"3cc78bf2b808079957568ec87b006635","sha1":"c57f4daed19c36687208863ac0b52500e59fa84f","sha256":"48f3149ec385e6820cb44e26ebbb73681e70c3fc3122bada0a8ce5bb0da188bc","sha512":"715ad82377587cede98444333ad94a387de73105b838c0a1e62811860579d564ae3b8b0c45c71b94ea003ca74d5bf84337c300b04461e301cc5bb3ca6e132b49","ssdeep":"","tlshash":"8b617d48ede07c0d424db61624c94567cc991570bfb9d7ffd799c41b4d301f9805a157","first_seen":"2025-02-02T12:59:31.945448Z","last_seen":"2026-03-09T22:27:34.610875Z","times_seen":5,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/var/rev0/00000/28241/osusume_sp_106_106.jpg","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /var/rev0/00000/28241/osusume_sp_106_106.jpg HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5350\r\ncontent-type: image/jpeg\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 04a89abfe0ff7cbf05faa2efdb46957a\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":5350,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 106x106, components 3","md5":"a6680eb9db35f60b6d4ccee3e3b31bc6","sha1":"80baf3cbd466e325f6bb4dd709b320787ed2fdaf","sha256":"328ca2173b1d3bc4c4b6eb9dcd2bef67abef4a7d7d3986c1316a67a10a21ec6b","sha512":"79d73572b72a16569ae445a58be04bb10d374abfda1140959b41b2869ccd5224586e6867efe716474b45da62f6786bca4ea34dd9025f478f192c5f25d86637d2","ssdeep":"96:Eo7FbMLpV00y6mdJdp6QDzSMYZCg04Y6+MsldQ4w0UDLDe:J7Fgj1y6qhvSbg4Ypa4wpG","tlshash":"18b13a8eb3f30a50a8b6f52935e2220b2936f3447bc75b710b89c44ae3624756e1d4de","first_seen":"2025-02-02T12:59:31.971326Z","last_seen":"2026-03-09T22:27:34.642788Z","times_seen":5,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: fe3feb9119b5e08e05faa2efdb469355\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:00.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 1326ccc860f4c4de05faa2efdb469291\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/var/rev0/00003/65799/campaign_sp_106_106.jpg","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /var/rev0/00003/65799/campaign_sp_106_106.jpg HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14874\r\ncontent-type: image/jpeg\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 7b550ade9d8adc0605faa2efdb469ecb\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14874,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 106x106, components 3","md5":"a3514e8c577b08ec69e8cd4b17ab72c3","sha1":"0e6a18f1241e046d88a4d12978c21039b4a67a21","sha256":"3a1d65b7ddcc3ecc9bd5800ce535f6570234b2c8c8c6b26b33af561dced2edec","sha512":"ad929d3119de6f0935227bd8ffe616b8474accdd77cac81c6a376dcc88f82eba8a10300dfc785a2ec66955d7aaca4d7aff73e6e7486a0de3634f3ce7c5a9e96f","ssdeep":"384:qbZL61i0SvCDrBTrBEPPfA2vzKhiqdMR11N7N:qbV/v6FTdEPPzlXx","tlshash":"d262cf41f076bb2b45bdc3eaffe66633a2fdd8f016588264b8d4222846acc56115c74e","first_seen":"2025-02-02T12:59:31.940717Z","last_seen":"2026-03-09T22:27:34.637965Z","times_seen":5,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/favicon.ico","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: aea123d1bc6dbc3205faa2efdb469d08\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70355,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/scripts/jquery-1.7.min.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /scripts/jquery-1.7.min.js HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/sp_index.php\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 94024\r\ncontent-type: application/javascript\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 240450b2a3307ef605faa2efdb469de1\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":94024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)","md5":"53bc2f0f436686aaadcda71a01a70ea1","sha1":"c7138655047c77dd0aa8444f7a062ae9d7888081","sha256":"f65d8822d029e71e92b71fe282f67c04b308f35ad638193ed05db4545a9aad83","sha512":"9caa895740730d56a471db173a66e005b695b509382f0967ba209bb91a1d8138083f1543203d124803bdcbfcec05071e49cce449fd1d777b121e8c7419e79e37","ssdeep":"1536:YbRdUgxV11T52e7evPJoHG9N5TTApILdoABzD4yff8qeLvHHEjam7pmXSBTncquT:SXr9KN5HaObnNCVqPO","tlshash":"6293e8d9b2d6716383b731b854af5107b136a8aa784c8c50f068d8e4be74e48907bf7d","first_seen":"2023-03-12T06:27:53Z","last_seen":"2026-03-09T22:27:34.605885Z","times_seen":10,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/common/js/common_sp.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/common/js/common_sp.js HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 34187\r\ncontent-type: application/javascript\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 615b4d209799d61805faa2efdb469100\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":34187,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11312)","md5":"e155dbeb3aa721c3e7e0eb82c90d4824","sha1":"c03b0b68216b024e708ae10c423a9d2568985a94","sha256":"2b09cf2c3cc0492b7bced2129ff2530380d4ad3c2fd925ab43a2b81697898b6a","sha512":"327287ef86096addcd0f7bf1e75a16686d3c1267e94f4180c75ab6135a3f545bd17115603e18329f955636c84b49e5f6e777b1521006945658e8b68d9fa0b890","ssdeep":"384:hNMidEZiDz1UHy3vvxkZFBjsAodUw7cAYxFnMIg7n5h6WWUKAuBdbd7HvJgcUyDm:bSSfpcsOPAGFulh6WuPdjV3Yj/hpCi","tlshash":"9ae20914fe4c30dd16bbe0b8a03e519af03a867a50014c9df867c4ea4d65ea121bff79","first_seen":"2025-02-02T12:59:32.059611Z","last_seen":"2026-03-09T22:27:34.622488Z","times_seen":5,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/logo_newsplus.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/logo_newsplus.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5583\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 5fc833833045049905faa2efdb4699e4\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":5583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 70, 8-bit colormap, non-interlaced","md5":"4084fdbd32bd4317db3ac5d3d9737cd3","sha1":"c6ed998ab6ba547f7be18308737501e4a6cec47e","sha256":"7b4e7b5f284ee2214e7f57e5e860799e3cdf82abbb3ed3ef2a121dbf9a121e77","sha512":"dee71303e75cdea2deb7651b434e86cd2fea9d87398c263ba896f76e304a45132eb70d7c29541ffb840f7cf87c6a80725590c9118d4db8219d36627a72cd59e4","ssdeep":"96:xjNDFOND7v6AodOwe4aNdDNKy45fDIukaBi6+Pw64nOod+aL/c+NJAbLE4C5Dh/i:HD6D2A+O5Pdhb4BEu5c6+PwJXIaL/c+8","tlshash":"96b19e8d7d322812856cff21986c027d67fa12a27a08dee58e4fed4645da1acc53c487","first_seen":"2025-02-02T12:59:31.930213Z","last_seen":"2026-03-09T22:27:34.632236Z","times_seen":5,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/logo_login_select02.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/logo_login_select02.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5181\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 319c3467ec5db05a05faa2efdb469d74\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":5181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 470 x 82, 8-bit colormap, non-interlaced","md5":"b5fc2fed69a985c92ae6d9f691debf78","sha1":"fae17c5c20909612549555ce785c8ddae3b5954f","sha256":"f0145c4ea5a523cfb1201c9b76deafdb736d90109d2696af2420fd67b9be1019","sha512":"e8b30a0882c4752fdca0dfe072798540a9a79b0afbacc4ad93c78588ad68bc01057a20ff4b669ae1e80a8f8cc93d98cefc9e1a9c42c963b896962f3727a93127","ssdeep":"96:82pr12msTvkxNo2t/52eSHuAwLdoyfBK0Q0ZOadcSL/ZVnYedO7/k9:dCvkLo2p52i6ypKMZfmSLTZdD","tlshash":"aab19ef7ffe0ba40b660e9821cfa10399a5dc9c2c2d4f02e7c4bd049d85987912219c7","first_seen":"2025-02-02T12:59:31.949787Z","last_seen":"2026-03-09T22:27:34.607517Z","times_seen":5,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/icon_point.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/icon_point.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 4468\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: a20d77b9f814656e05faa2efdb4691ea\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 178 x 56, 8-bit/color RGBA, non-interlaced","md5":"1aeaaabbbf3539140b8e73c560f172d2","sha1":"5d5b48955d68781bf46759bdd7bc72e72fbd7efa","sha256":"75fe2a2e1e98cf50a882db788d5901edab402b8f649844cc9c07977f8cd43cac","sha512":"c83f12939b4bb2610dda588a94840b7ee06331df198905752e107d3055e1fb9ba3c4b2956a48d8e5b1efc1e02afd555bbba017efdd3a5a173f7a508266191c14","ssdeep":"48:ag3sLNaWsYZi9+qzIxmrvGsnjmvtykPR0hP0I3kAbmpy8V8SS94Zk8BXzRSLBj8A:h8LkRbbnnjot/ahKpyj0S8XZ5kb","tlshash":"87918dcab785150892abf229120fcc148a547e0fc2c641b760ccad26d7e9d451dd9a7b","first_seen":"2025-02-02T12:59:31.959639Z","last_seen":"2026-03-09T22:27:34.646918Z","times_seen":5,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/var/rev0/00000/28306/osusume_sp_106_106.jpg","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /var/rev0/00000/28306/osusume_sp_106_106.jpg HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14108\r\ncontent-type: image/jpeg\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: eeee8b9a3bf5d2fe05faa2efdb469341\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14108,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 106x106, components 3","md5":"b92b7b4e2dd47b849ad43f3b36a7261e","sha1":"66810dc851e1aedc1c2065577dc00d78ca55dd68","sha256":"47ee816045c35a845ba1528afde36892b68be50c076afdb94bd949dc6b5e8893","sha512":"ea980657b7b16340a26141380e8cde7edfc4c51c022409e09f14334bc4d3cd0e3a17b4d7aab0aa0aa3a531866e15dc49dd1402049a92de1f691e5b3e36a53316","ssdeep":"384:JfYMRbU95B22b7yYgSE6Lu5o+bTXn0cNsiEb318:JQqAR2i7OB95oqTXn2iE7e","tlshash":"da52cf088963771af144653287e2a0faca48a3fc4ee755d731d6ea8ff47006e04b51a9","first_seen":"2025-02-02T12:59:31.966728Z","last_seen":"2026-03-09T22:27:34.612951Z","times_seen":5,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:58.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:58 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 5440d4703bcde44205faa2efdb469782\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:59.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:59 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 85a5e78dde105b2505faa2efdb469ea9\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/publis.css","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /publis.css HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/sp_index.php\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 102\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 73fe1436781f458f05faa2efdb46908b\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":102,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"66a64cf2f1b7151bc643572d231f3c2e","sha1":"0dea118dfdc4e55c707cce8b29934d9e7ac54022","sha256":"2250e79f46cc7c3d269a2b477ea74d48441b421eee9a74317d07c2dbf00eba48","sha512":"471985cc101fe74b372830337332b3bcfabb7308059aad6c4ed0cd6599d750be1091e511a76b5cf75a9437ab8a4b8fd5db1e552658d191195acf28658263cc67","ssdeep":"","tlshash":"33b0120e65680406f5040c453e035e21141c1c09048ee7b92705ca1a1df1712028333d","first_seen":"2026-03-09T12:53:29.757739Z","last_seen":"2026-06-22T00:05:26.571364Z","times_seen":6,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/common/css/common_sp.css","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/common/css/common_sp.css HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/sp_index.php\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 50523\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 2b5c7947e7f69b0b05faa2efdb4696c5\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50523,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"fd35942f8228a2ed883274a34e6888bf","sha1":"21979bea9fd8c7d768f0bfe29c2d6b85f41ac123","sha256":"59a303367e2c5fd00de1c4d290532b2e64fddee82e9856eabe80b468a952b904","sha512":"5f8ad74b5ebe6dc3fffa62c029b38f210f10a9d46894dbfa029785c7a002283d92bc8db8520c04f0c7cde61deb2ae98324f3179a405869e4823d1df85f558963","ssdeep":"1536:cZVdnHbmFQQ5y2N/peJdS5SaDbR0XF3zTcbOqzC3cf14K2lfPphxcDCG+MG+N4oa:w2/pIxvEOlLPphxcDCG+MG+N4oV6NF","tlshash":"f73343276e911889b20fe4b5be1deb87db0e0817af4f6e35a465b53ce3064e5103e60d","first_seen":"2025-02-02T12:59:31.991695Z","last_seen":"2026-03-09T22:27:34.641779Z","times_seen":5,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:00.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:53:00 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: c539f45c7e363a6805faa2efdb46911e\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: cb08e92aa292cfd505faa2efdb4699b9\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/pagenavi_bg.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/pagenavi_bg.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/library/common/css/common_sp.css\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 209\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 073e480ed30d970705faa2efdb4691d7\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 84, 8-bit/color RGB, non-interlaced","md5":"64af31f6b7cdf9527464873d9b177b83","sha1":"4b9f7df6775e53efad6d31875634f0485128bbf3","sha256":"b757d543919762b100ffd250b9300775b4da0e23d23ecd876f61c4ad6eac678f","sha512":"0bacbd7d6414db1bae885b62ac171f575092230980de220a93a9e7e7cb8fbb57179be2164358c907d6a1a331f92fd0ebd60930783cea27bf28f5256973cd52ed","ssdeep":"","tlshash":"4ed022c9abe98da0d4bda87294031420c8fa8d6d07225278cb1992011635686c0baa6a","first_seen":"2025-02-02T12:59:31.996556Z","last_seen":"2026-03-09T22:27:34.635574Z","times_seen":5,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/icon_window.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/icon_window.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1144\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 8dd821a444ee208605faa2efdb469aca\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1144,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"ae42d2fc5a4c19e566a2cbe0a37303d6","sha1":"e3745f0b9f3004326ad024761225a1deb6df67f4","sha256":"2bf718003cd7f569d9977111ce71285e12b3e67bf64e93fdb109053f3eb911b4","sha512":"90bb42f96b57c5d7840ed96484f1b731aafb280f93eba76c97954b70fb0df33620d76a63acc0e3f0b20fb413b47d91ecc6d2cf032c10b3dc31dd11c64a09a568","ssdeep":"","tlshash":"1e2133c9f95164819165ee1228f7814bc96b4880a6e1f4f7b4df881b8d781f154594cb","first_seen":"2025-02-02T12:59:31.937581Z","last_seen":"2026-03-09T22:27:34.645927Z","times_seen":5,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:58.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:58 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 5a971a34c839af4805faa2efdb469909\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/public.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /public.js HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/sp_index.php\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 957\r\ncontent-type: application/javascript\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 216e509c594c236905faa2efdb46901a\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":957,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4cb5a971c148cc9c321b37099a6a57ab","sha1":"c4b9a13f60514c408e0b5bf39496fb1fc6d57f00","sha256":"161842cd5c9c5a02f66eb1c7eb3d04c1df8f249b2d5a464e422623b6b7f5b541","sha512":"8d009d34c2e98644b30226df124f4d8c636460a682432bc9ee57649a3ad34b255f825285d85bff269bb4a510459c2d93e993bb6f968eb404e3a2d29fef20ec2b","ssdeep":"","tlshash":"4e117b9dfafc146a513334205c7f255b797e70933c1a9d56b9ec50807fac75c50a5832","first_seen":"2023-03-11T20:56:22Z","last_seen":"2026-06-22T00:05:26.553933Z","times_seen":11,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/var/rev0/00003/66027/campaign_sp_106_106.jpg","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /var/rev0/00003/66027/campaign_sp_106_106.jpg HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14542\r\ncontent-type: image/jpeg\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 0234f0bb2c4ccb8305faa2efdb469175\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":14542,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 106x106, components 3","md5":"544d14d389a62b3db754aa82085fac6e","sha1":"00b102a282cd9bce574add79ebea7d8db4655c3c","sha256":"5b7d7d3e7d74d1d84d51eaaafb4d291b8ea29c4e29da5cab8355673f773509e4","sha512":"029b668776e43dac16722113a6bfe632b8e9397c2247eb8242ffbc2bd3dc95ccebb71c6345a5ee006576a540ab1df05491feaf1d5667c99ecc2c048d307fcd39","ssdeep":"384:Tk38IsJxSwtbhv/CbUjgKodTH3HV6439G:Ybs2ydv/CbSfm31x39G","tlshash":"1362c0873767895a5426429df0d5db043e330bc78b9b11f522623390dcadd8d1efe209","first_seen":"2025-02-02T12:59:31.94216Z","last_seen":"2026-03-09T22:27:34.62457Z","times_seen":5,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/icon_login_close.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/icon_login_close.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/library/common/css/common_sp.css\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1174\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 730e6bce411b426e05faa2efdb469f2d\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 18, 8-bit/color RGBA, non-interlaced","md5":"c9f1296ac2df0b4a3fc641dbd0b816ff","sha1":"6760012b5b0d07dbce848aed5b1743efbb74255d","sha256":"62daaf9b9d9f93ed240933347dfef4cea9e282d24b38436a9030fb1150379762","sha512":"20add32bd264c738cb328abeb5aec686f1e653fd7659860217b4373fdccf320acaac4ab30d900ec0e37f5d78642627b82ac7324ba4cbc6e066cd7f640f4e0c27","ssdeep":"","tlshash":"0621418def6269015a94d59119e9802bdc3a18009fe0e97eb8ce8c2a4cf81b54c0a5cf","first_seen":"2025-02-02T12:59:31.997901Z","last_seen":"2026-03-09T22:27:34.638913Z","times_seen":5,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/h3_bg_01.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:01.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/h3_bg_01.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cr-nicos.com/library/common/css/common_sp.css\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1329\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:53:01 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 91a7252d43d88a9a05faa2efdb4694fa\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 66, 8-bit/color RGB, non-interlaced","md5":"224b5b2b0e0245138affe3a38e34e35c","sha1":"745367fb8efbe7ef0fc7f93186a64fa0ea2bc0ed","sha256":"dd515c55024180220ca12edb3f18357e6fc923079b60ee7271fdcf49c7393422","sha512":"8681831d15b73efb57baee245489b0cebeb796ef8548e6848f6fc8a7f97ac3738112dddbcc34707b609cc6e9f7cfff81c7b2735609776b068eabf1663652a392","ssdeep":"","tlshash":"d821a58efb813c01514af67118eb9037ca1205106fd4d576bf8ec82a8d763fc8419ac7","first_seen":"2025-02-02T12:59:31.985114Z","last_seen":"2026-03-09T22:27:34.636799Z","times_seen":5,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/scripts/jquery-migrate-1.4.1.min.js","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /scripts/jquery-migrate-1.4.1.min.js HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10056\r\ncontent-type: application/javascript\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 8b01b9a8a43332fb05faa2efdb46988d\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9959)","md5":"7121994eec5320fbe6586463bf9651c2","sha1":"90532aff6d4121954254cdf04994d834f7ec169b","sha256":"48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d","sha512":"b74a2f03c64e883b9a34de43690429327dfb4aa230a7a6afca8150a16e3d84e98461245ff264c26368d9904562cc34fe219f71f951d364fa5c68c039b76776cd","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLR:srhNyNO0kkMKzFSDdAcIYwLR","tlshash":"2e22c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9d403ab39","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-08T20:36:51.913929Z","times_seen":58490,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:59.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:59 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 340b88a5d5bafbcd05faa2efdb46984b\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:00.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:53:00 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: b27b08dcc805f9c905faa2efdb469419\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:53:00.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:53:00 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 7dd586c9494314e805faa2efdb469b25\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/var/rev0/00003/65238/nennmatutrip_sp_106_106.jpg","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /var/rev0/00003/65238/nennmatutrip_sp_106_106.jpg HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13206\r\ncontent-type: image/jpeg\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 948915ff6acfd7bf05faa2efdb469f40\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":13206,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 106x106, components 3","md5":"ddc999e9cf7e50bee86c3f6823535673","sha1":"4d73079ad078ed5546a40860108e5dbac378425b","sha256":"8fb597ea91eaab80136ab330368e41e2caf424f4ee12e1c57669a94a09f8c945","sha512":"36d7c3c17e70c64b720b37ffb1bfd9ae3f64fceb0e191fe12d7c5a82fe54312f2dde1ed6e26c5c93e73c2bc108e762b2eece0aad4cd68efee5391bef83b25c33","ssdeep":"384:qKDY179gtkGgeLQ2lB4relXuuhyL8LB40dzkHsmJZAO:qae7OtkGgeLQ2PeOgQB405kHBn","tlshash":"1152d1307261915e99a542b9176d74c038aea3f70dd6ede2dcbc40b4fce6ae74920c24","first_seen":"2025-02-02T12:59:31.951196Z","last_seen":"2026-03-09T22:27:34.628473Z","times_seen":5,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T12:52:56.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:56 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nserver: Google Frontend\r\nset-cookie: PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56; path=/\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Snowplow Analytics","description":"Snowplow is an open-source behavioral data management platform for businesses.","website":"https://snowplowanalytics.com","common_platform_enumeration":"","icon":"Snowplow.svg","categories":["Analytics","IaaS"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":70355,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4cdc061cd504ac7b1ce08adea21f68ca","sha1":"f8b2d9d2ce6f63ee37270cc04b04b2b81dbfa078","sha256":"a55141d07adc34207f03a23620c0d95805866803d4d6e5eac997b5ac2f829926","sha512":"6aa094e166dd10c2be88b40aa6b9d09043f0509d963f33d18b7712114df03798c1b2ecfcd2e5499a14c068281778d8457f72ec57bc4d25d115fbe9948bb89ff6","ssdeep":"768:1Euv3YKsVFQ4Xnpm5c3RqNVTRWmXkVCTpq0T:1E63YKCF5eNVdWmXoCw0T","tlshash":"e463d769b79e497904ce22b2e0f77fc8b0af4c3ad952ac44bc7f85242b45ec461745b8","first_seen":"2026-03-09T12:53:29.723283Z","last_seen":"2026-03-09T22:27:34.643802Z","times_seen":4,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/logo_brand_mufg.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/logo_brand_mufg.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2950\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: d6c2f9bcc35a6d6505faa2efdb469501\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2950,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"ccbebaac73887834e639bbf7eeb5bb1b","sha1":"29bd21a88d5e05c0d14595866f8843b7af2ac804","sha256":"d9dd46d36535551615bc746ae5c016a1f3b065db8ba9bdc771d2724eec0530a1","sha512":"ef75884fe7d7c905d9dc4add35accae3426ec082d2ea817dd38cdb85f065266013a88162372d2d42a3d4013db820586542ceaeef030a9433678ed4f400656a99","ssdeep":"","tlshash":"1951ea19eef198d0f685c03120e959629a730050bad2ba3dba99e8033d5cfa64cd55d7","first_seen":"2025-02-02T12:59:31.932231Z","last_seen":"2026-03-09T22:27:34.610034Z","times_seen":5,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/library/sp/img/common/icon_campaign_unneed.png","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:57.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /library/sp/img/common/icon_campaign_unneed.png HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1807\r\ncontent-type: image/png\r\ndate: Mon, 09 Mar 2026 12:52:57 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 5aac9bd509d0291e05faa2efdb469820\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1807,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 146 x 26, 8-bit colormap, non-interlaced","md5":"adb8a4f83b4bfde54c31792dfddc45a3","sha1":"f69b909d0c8c87f928b6e754fb1e8d214031c7be","sha256":"be53f1f6b94c0a0abbb1ec91750dfb56bb4e98db2b4ae935eefe92e5fba9802f","sha512":"780f2bdd09a669dd661efdb4d397b8029d862cbe4d81486d2e3c48b9e8f7bb53258664200f46b9d46d0759e2fa820886cd7d87b7eaf19abb112e2c5ad0185882","ssdeep":"","tlshash":"3331b58df9a27402569dd49928f7410b4eab89d0dae5f16eaccacc635e721fa01143cf","first_seen":"2025-02-02T12:59:31.938925Z","last_seen":"2026-03-09T22:27:34.626497Z","times_seen":5,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-nicos.com/newsplus/sp_index.php","fqdn":"cr-nicos.com","domain":"cr-nicos.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-nicos.com/sp_index.php","date":"2026-03-09T12:52:58.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-nicos.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 03:49:16 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"75:80:C9:F3:17:3A:A8:56:81:71:D4:E9:A2:38:AC:A7:19:1C:CB:F8","sha256":"32:82:D8:A9:68:34:8E:8B:5F:D3:35:73:84:88:90:A8:AE:E5:F9:15:E6:53:7B:76:5F:0D:0E:EF:EA:2D:26:51"}}},"request":{"raw":"GET /newsplus/sp_index.php HTTP/1.1\r\nHost: cr-nicos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cr-nicos.com/sp_index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpwBMDBkYTZjZDJjNDFkYmY2ZmQ5YWNhYzE3MDYwZjI2NTYzZGE3YzEyOTg0Yjc0MWI2MDExZWU0Yjk5Zjc4NjRlOGZiOTdhNWM0NjZiYTBkYWNhNGExNGIyMmEzYWRjMGQ3YWMyODc5MmM2ODgxZmYwYWE2NjZiNTY2YjU1ZTk1Y2FkZTA0N2VmZWU3NmJkYmRiMzc0MjRlZWQ3ZDhhEKzGoZXNMw; PHPSESSID=9ddb44fe24b2eacc8da6558004e63e56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 09 Mar 2026 12:52:59 GMT\r\nlocation: sp_index.php\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: af847b2ef0a15af805faa2efdb469266\r\nx-powered-by: PHP/8.4.16\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"PHP:8.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T20:43:02.481725Z","times_seen":17785880,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"cr-nicos.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"cr-nicos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}