{"report_id":"75c01ec1-6e6d-4aa4-8c01-f840ee17d201","version":0,"status":"done","tags":[],"date":"2026-07-21T13:13:09Z","url":{"schema":"http","addr":"crsor.ve1.shop","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"crsor.ve1.shop/crs/","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"title":"Home | Civil Registration System | Government of India","dom":{"size":102956,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (46705)","md5":"2b405ec238d350a74cd50787147e8276","sha1":"417fff17ef9abba12466f2bf3849bcef5146df55","sha256":"880d503ee0d5951061e1d6a283403aa8fc37b6ddebc675352550b834132c733b","sha512":"28b5c12eca1545b3909dd94699b3e774853b5dc36a29a60a3321e54e401fbbaa52ceedb3090784ffc7c133bf3421bc1229e042523bfcc878daeb2c8dc2f37141","ssdeep":"1536:rzJkqp571lwdM4FOpH8CQuleBPo+E8p/NpMNQP31JmIKw2jbTNIiAqMWU2CsHtSA:rFqGr4M","tlshash":"68a37ff043004bee6783fb5f90e3ba2c1569d06ae61b06cd7a542e6d4bc5be600de359","dom_hash":"domhash55fe2fb29bdf6476d2c0d47524404ff4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"crsor.ve1.shop","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-25T13:13:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"crsor.ve1.shop","ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-21T13:13:09.954717Z","last_seen":"2026-07-21T13:13:09.954718Z","alert_count":88,"request_count":22,"received_data":1267871,"sent_data":11300,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":2,"received_data":33290,"sent_data":1092,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crsor.ve1.shop/crs/","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-07-21T21:18:05.856293Z","times_seen":185730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/material-icons/iconfont/material-icons.css","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.549Z","timestamp":1784639561549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/material-icons/iconfont/material-icons.css HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":796,"size_decoded":1162,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-07-21T21:25:13.244538Z","times_seen":52142,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/CSS/main.css","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.550Z","timestamp":1784639561550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/CSS/main.css HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Jun 2024 03:03:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 44870\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":355471,"size_decoded":45161,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (57408), with CRLF line terminators","md5":"523441ff24bc8c38a395896f55ac82c9","sha1":"526dc48b0c51b52679cd069473ca0ad560666b62","sha256":"13d269688a43fbafcdbdebb300b6e4e5f9dd7087b9e26c33ef0f759e49688008","sha512":"e4c0d99822cadff328a0266c19c0175549aeb8432790544d72acf31bc8e2ae6736e4b68b8d102e6b2a0a343f76d922f8df67e05c458ebc6f8e24aefe30a26585","ssdeep":"1536:/2EAFF+J8kJOS9yijlEq31NSwzS5jyQWgGaYnPeMwgG4ZwWcPi04Fuv1pgW8/Jxn:pLzS5j0nh71","tlshash":"e5749331e345262aed1f8526b9c0da49e1e8cc51f1d215ebe9e26d3c8ff74c511a33a8","first_seen":"2024-08-22T17:16:28.652992Z","last_seen":"2026-07-21T13:13:14.683864Z","times_seen":83,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/pdfjs-dist/build/pdf.worker.min.js","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.554Z","timestamp":1784639561554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/pdfjs-dist/build/pdf.worker.min.js HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":796,"size_decoded":984,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-07-21T21:25:13.244538Z","times_seen":52142,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/logo/crs-logo.png","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.578Z","timestamp":1784639561578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/logo/crs-logo.png HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Jun 2024 03:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3853\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3853,"size_decoded":4099,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"c874f30eea2fad469593f252d5bf67e4","sha1":"c6e6ee3e0de7e1ccc24d2b3f37c9d74f1df908e5","sha256":"93acd29a015c5d9bd3f2747a36681152cf155cb5d9db8e5eecb80f41d57a959f","sha512":"10e6d05564704d9f624e8042c10f79f86001c2f2a102512b175bef8ee371dd0a83bc1a7d4323829a417c5dbb6abfb5ecfd801bc770c38703a8e02a673ca4e264","ssdeep":"","tlshash":"72818d76b47b333b59780dacc39590b4c5be3a40f808f0132762226ead944cd95b3578","first_seen":"2024-08-22T17:16:28.661658Z","last_seen":"2026-07-21T13:13:14.687478Z","times_seen":150,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/base/fonts/fonts/77caabd3-1877-4634-85c8-8e398a093b99.woff2","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.894Z","timestamp":1784639561894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/base/fonts/fonts/77caabd3-1877-4634-85c8-8e398a093b99.woff2 HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/assets/CSS/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":796,"size_decoded":984,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-07-21T21:25:13.244538Z","times_seen":52142,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/images/crs-logo.png","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:42.288Z","timestamp":1784639562288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/images/crs-logo.png HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Jun 2024 08:19:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3853\r\ndate: Tue, 21 Jul 2026 13:12:42 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3853,"size_decoded":4099,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"c874f30eea2fad469593f252d5bf67e4","sha1":"c6e6ee3e0de7e1ccc24d2b3f37c9d74f1df908e5","sha256":"93acd29a015c5d9bd3f2747a36681152cf155cb5d9db8e5eecb80f41d57a959f","sha512":"10e6d05564704d9f624e8042c10f79f86001c2f2a102512b175bef8ee371dd0a83bc1a7d4323829a417c5dbb6abfb5ecfd801bc770c38703a8e02a673ca4e264","ssdeep":"","tlshash":"72818d76b47b333b59780dacc39590b4c5be3a40f808f0132762226ead944cd95b3578","first_seen":"2024-08-22T17:16:28.661658Z","last_seen":"2026-07-21T13:13:14.687478Z","times_seen":150,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/crs/","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T13:12:41.133Z","timestamp":1784639561133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /crs/ HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.31\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 15678\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":102937,"size_decoded":15884,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (46705)","md5":"2e03c73f5c48f40248c607abd2aeb781","sha1":"21d046788df79b2540a7770d177fabe47547fbeb","sha256":"fb59b856d8b6515a729cde4bbdb12a7e9cff6e856d489027bb49751d30da8c0b","sha512":"8c7befdd1cf02ee0de945b67057ef1df2dd9f9bc4fef2d3d6efb9deb96d8e54d246475136cde98c9ce0c22deb694f9a0e62c12676f9eef1048f26496a55c3180","ssdeep":"1536:rzJkqp571lwdM4FOpH8CQuleBPo+E8p/NpMNQP31JmIKw2jbTNIiAqMWU2CsHtSc:rFqGr4A","tlshash":"92a370f043004bee6783fb5f90e3ba2c1569d06ae61b06cd7a542e6d4bc5be600de359","first_seen":"2026-07-21T13:13:14.689159Z","last_seen":"2026-07-21T13:13:14.689159Z","times_seen":1,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/images/healthcare-death.png","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.581Z","timestamp":1784639561581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/images/healthcare-death.png HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Jun 2024 03:12:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3084\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3084,"size_decoded":3330,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 1-bit colormap, non-interlaced","md5":"e676f3ada17e03c8d3ec4af4025a216f","sha1":"278158598dc758386de5dd0796d1766db1084c7c","sha256":"0680883e0676130b51bc619965f4ae5e92805b6cf52868dc6e852f0f093f4028","sha512":"7017b7e913b3f74d3b90a53b4b56339b9d3059ce1587ad6f04a84b194b9a97a61a80155bc11f05b3c18ecf08967043d591851941200ff4835b35a080acd44d07","ssdeep":"","tlshash":"5c518dea8616f0083216e5d2336e65023cd30d9bacc9b5bede5787f2a44521ccc4714a","first_seen":"2025-09-04T09:32:57.493908Z","last_seen":"2026-07-21T13:13:14.691996Z","times_seen":44,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:42.146Z","timestamp":1784639562146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crsor.ve1.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 03:00:18 GMT\r\nexpires: Fri, 16 Jul 2027 03:00:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 468744\r\nlast-modified: Wed, 11 May 2022 19:24:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15744,"size_decoded":16557,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15744, version 1.0","md5":"15d9f621c3bd1599f0169dcf0bd5e63e","sha1":"7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52","sha256":"f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615","sha512":"d35a47162fc160cd5f806c3bb7feb50ec96fdfc81753660ead22ef33f89be6b1bfd63d1135f6b479d35c2e9d30f2360ffc8819efca672270e230635bcb206c82","ssdeep":"384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/","tlshash":"8162e00158a163ade9b2327ed10b1b91c40660a27d2504e8c6e4fc95fe3d7ed5487b76","first_seen":"2023-04-05T08:15:27Z","last_seen":"2026-07-21T20:16:37.490926Z","times_seen":162149,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":18,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:42.150Z","timestamp":1784639562150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crsor.ve1.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15920\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 04:36:32 GMT\r\nexpires: Fri, 16 Jul 2027 04:36:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 462970\r\nlast-modified: Wed, 11 May 2022 19:24:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15920,"size_decoded":16733,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15920, version 1.0","md5":"3a44e06eb954b96aa043227f3534189d","sha1":"23cef6993ddb2b2979e8e7647fc3763694e2ba7d","sha256":"b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e","sha512":"fab970b250dd88064730bd2603c530f3503abb0af4e4095786877f9660a159bf4ad98c5abea2e95eb39ae8c13417736b5772fcb9f87941ff5e0f383cb172997f","ssdeep":"384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK","tlshash":"cc62cf5c6a901684c67c29b63b6d616be9a1cd50c2ab73904fdba317d30d3a1e0298fd","first_seen":"2023-04-05T08:15:27Z","last_seen":"2026-07-21T18:51:23.637445Z","times_seen":65835,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/images/slide-1.jpg","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:42.183Z","timestamp":1784639562183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/images/slide-1.jpg HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 25 Jun 2024 03:12:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44643\r\ndate: Tue, 21 Jul 2026 13:12:42 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":44643,"size_decoded":44891,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x556, components 3","md5":"a7c62386e7bee8b26688136fd53f59f3","sha1":"9dd59f98f901b5301b2a80f2c446ba281ad27690","sha256":"a1b92411bcf621dd0ded20b5f6cd28ce8287dab855c75be8e2f352ee034a79a2","sha512":"adb25819d9a5f8445cf8359ea33f8535407c8f5c4ff18f18694e711162736642b24bb0b12abd9b622ee386d1ab17e8a565bba03ee136b82318ff246962095892","ssdeep":"768:3LxYiawIurC/rXiVt7w+90fAxy+yIBBu7/Yx8zU65w3ZFGKfHU4T6xyQsaKnEH:FUv96d390fAxCIBBw2k5w3ZFGe/63sRu","tlshash":"a213f27bb6261b95f510fcf70d226334de3ad7c53cd4944d02821f66b3ad9628a9ab0c","first_seen":"2025-09-04T09:32:57.506694Z","last_seen":"2026-07-21T13:13:14.695022Z","times_seen":43,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T13:12:40.347Z","timestamp":1784639560347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nx-powered-by: PHP/8.2.31\r\nlocation: crs/\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":393,"connect":92,"send":0,"wait":103,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/pdfjs-dist/build/pdf.min.js","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.552Z","timestamp":1784639561552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/pdfjs-dist/build/pdf.min.js HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":796,"size_decoded":984,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-07-21T21:25:13.244538Z","times_seen":52142,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/images/emblem.png","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.575Z","timestamp":1784639561575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/images/emblem.png HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Jun 2024 03:12:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5318\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5318,"size_decoded":5564,"mime_type":"image/png","magic":"PNG image data, 105 x 154, 8-bit colormap, non-interlaced","md5":"a11ead9872830abbaaa762f16fd47402","sha1":"b6ad5e1144eb2869da87f18a054ebe0b81b10ed2","sha256":"2a721729088121ea59b491a9398354aa433adf255c61125839e77899534492c3","sha512":"27a1aede31564a965f87e20a239e71db5af5af5e40cb477e84b77ed415e9200fe48fb3381a59f557d532ec8ad4b5baa3ae78dd14de23ac7f7a0dc0cd6b036aa9","ssdeep":"96:N5TYqIqpWy4G+yDzRtMtXLGwaoGZne3dDy:EqIqEy4/qzRtiiwanle3dDy","tlshash":"abb1ad80c5a9088be2be7c48da91774b71cb0d2dd47e35f7acfc4730a823876266c859","first_seen":"2024-08-22T17:16:28.658937Z","last_seen":"2026-07-21T13:13:14.696858Z","times_seen":151,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/images/azadi_logo_light-min.png","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.579Z","timestamp":1784639561579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/images/azadi_logo_light-min.png HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Jun 2024 03:12:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6340\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6340,"size_decoded":6586,"mime_type":"image/png","magic":"PNG image data, 100 x 65, 8-bit/color RGBA, non-interlaced","md5":"32d93343a815978fd9ed56414883c0bd","sha1":"2405ee6a5e036545f24779e28ea699489efb9b94","sha256":"e8e90509a491d3da05e2438eef0619c8e325eeabf0572700d175b45801ddc385","sha512":"8735061ef7700137bc375c11e9b377724d58f96605923aff8065036791756e5f289a68da2813a9e7ab5916c537fd8c7c97d48b79366189c3c88a300bf66b0c96","ssdeep":"96:zoqhghidfxrDp1j/rJuTomydYpui/sZBD1N3hOIAuEgNoHm1BgYNE07gxP:zoqhciBdj/rJuzI6/szxN3h/ZvycKDY6","tlshash":"b6d19ec6b2f38f46db83be62cd781712518fa844ac51fd70c307239a4ba8e925f61274","first_seen":"2024-08-22T17:16:28.662816Z","last_seen":"2026-07-21T13:13:14.697572Z","times_seen":151,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/images/infant-birth-1.svg","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.580Z","timestamp":1784639561580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/images/infant-birth-1.svg HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 25 Jun 2024 03:12:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1112\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2203,"size_decoded":1407,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a05afb2e60b813325941ded8b60643c7","sha1":"84d17bcaac7ff5ae18c85f7d30cb3d1e2e56482a","sha256":"986f282e65fbd897073837158290d0177f954edf8778075f2edf6c8aca3a51c8","sha512":"042767d1f63015778e42c28f5f1edf320851b3a17c693570ed4485e8024527ece908c6bb5c41b937d79aa192568d8995458b7b848887c9d1f673a7b97dd6d46d","ssdeep":"","tlshash":"e441e04bc380dbb8f99842389570785d75d0ac66a0b0e1d8abbf1492d40c4d1d2ac6fe","first_seen":"2025-09-04T09:32:57.480742Z","last_seen":"2026-07-21T13:13:14.698233Z","times_seen":49,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/images/user.svg","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.582Z","timestamp":1784639561582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/images/user.svg HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 25 Jun 2024 03:12:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 432\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":904,"size_decoded":726,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0920f4310fe4588b0822482d0295b57c","sha1":"15c2ce47417e510589e04b19833ab17d26d00340","sha256":"57b91260245b8145fa65023616e3f66416957e421965e7c21cf785a12d2d0752","sha512":"d1be817b975f3d223700f68d782260a05eb928c0a7db09e14cfeb20fe63a7731d18af418339e836d2a74201f3adda19d2e1d9c58bdd2ce07dbcebc07e23b2a80","ssdeep":"","tlshash":"9e11ccb412fdc884a5248700f6e726c8d529f1aa46ab4acd76cc7077de700a4260be36","first_seen":"2025-09-04T09:32:57.500745Z","last_seen":"2026-07-21T13:13:14.699028Z","times_seen":44,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/bg-logo.3696e599b410630c8833.png","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.898Z","timestamp":1784639561898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /bg-logo.3696e599b410630c8833.png HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/styles.d9a92685a7b2d205a93d.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Jun 2024 02:55:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38198\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":38198,"size_decoded":38445,"mime_type":"image/png","magic":"PNG image data, 1920 x 272, 8-bit colormap, non-interlaced","md5":"12b00b6d575653a8387c9f128c71a37a","sha1":"36b1d19602d0c48ac2acda2cca8359eecdaec0d5","sha256":"9352e327da58165c486b4a421b6f76e91b53b64b76b72c4575b18ead5cd374af","sha512":"d763bf1c83a45606ec69c8177578aa4c6f40fbed1320ed86c4e66995ce8deaf04e45b89628a18ce4d3dc2d3785548b582c86973e01ca2cf7869bd2cf7c9688a6","ssdeep":"768:nnp7S2FvYaug4NAaV/axuPv24k90qU64c8mh73Dq:cmugiyxuPv24k90qUJcZh73W","tlshash":"5d0301763891ec9e76c8cf20b853f7eb065a4439004601b96a7cb38ac86e53073f92c5","first_seen":"2024-08-22T17:16:28.669698Z","last_seen":"2026-07-21T13:13:14.699724Z","times_seen":136,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/styles.d9a92685a7b2d205a93d.css","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.559Z","timestamp":1784639561559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /styles.d9a92685a7b2d205a93d.css HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Jun 2024 02:55:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 44206\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":346759,"size_decoded":44497,"mime_type":"text/css","magic":"ASCII text, with very long lines (59679)","md5":"397881e53e8f61a0451b1d3293966209","sha1":"920708131ab554dc0c9d3bc2cb3eb95e0bc50729","sha256":"2ef66aa6dc7ae6d6fdecad086a163f7af3dcc8da1b21774517bac16419ea0904","sha512":"2deb5f9370284330fc079a794ace6d793d150b579eb1829d77a699b11e0f9ae14e01a25d745f1b79bb987ba69824310d98044cfd0e4ae180af432dd91dab4d4f","ssdeep":"1536:Hu0gaqYnoCODCsIVzXZTjz55BVPhswp9Udkz3sSuvks/62n018A3mPu/s+qu/EY/:JkBEtfLauVUpz600I4fDV/","tlshash":"47748592f540201af55781a5d4c0bf694eae6541f3013e7af1576fb98b8adcf02afb08","first_seen":"2024-08-22T17:16:28.655855Z","last_seen":"2026-07-21T13:13:14.700307Z","times_seen":113,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/images/banner2.png","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.567Z","timestamp":1784639561567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/images/banner2.png HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Jun 2024 03:12:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 234371\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":234371,"size_decoded":234619,"mime_type":"image/png","magic":"PNG image data, 1914 x 486, 8-bit colormap, non-interlaced","md5":"217e300e56ee8953370574e9897bf5dc","sha1":"b334af0e3025302dfcc397cd4f4d313628bd04ef","sha256":"a49ad58e38754abfec7f34b297b287c4368f4240e21e885ea49352118d5ac676","sha512":"282e1b41b04e8fe430befdd52883b9857027d6b8147b2d7ffa6c4e36d4efc88bb6d3d6c2ec438c8e784b980cb9742f5773af0f6b27cbd5eeb7a5b7290d4059ee","ssdeep":"6144:beNIa/PyZ+4PfwVIKrPlD6TRFl/sghKMfP8j:beJ/PkJCI1RoggM30","tlshash":"0a3423d85ef53dfbd9af41bdb8b7811422046d804712264eb859cc818389dafb7a85f2","first_seen":"2024-08-22T17:16:28.65454Z","last_seen":"2026-07-21T13:13:14.700861Z","times_seen":101,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/images/flag.svg","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.573Z","timestamp":1784639561573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/images/flag.svg HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 25 Jun 2024 03:12:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 701\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2091,"size_decoded":995,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"929a5f04415abb1243c9ee39e3c6ae05","sha1":"4b92cd9f1b4b04de4377eeb8b3714122e26cbe71","sha256":"eefec48081241c0d3cf292d7f67e77a3da8950ba4b9c1bc042fa1b741fb74eb0","sha512":"ddb283b6ff7f3136f13d36227bf9da3292d151c52dabf5d6a3bc83600b0a549765bc337e06c4b682c461e3eae75ddd51a4b322c841c4118088366f821e239d5a","ssdeep":"","tlshash":"9e41bdb161eed852ea31c381ead414b4ca6da2ef468742dcf18c721f4f354a5394f365","first_seen":"2024-08-22T17:16:28.657766Z","last_seen":"2026-07-21T13:13:14.701713Z","times_seen":127,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/logo/crs-logo-light.png","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.576Z","timestamp":1784639561576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/logo/crs-logo-light.png HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Jun 2024 03:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13650\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13650,"size_decoded":13897,"mime_type":"image/png","magic":"PNG image data, 890 x 129, 8-bit colormap, non-interlaced","md5":"c64be9f75adcecbd9832ba41bf089e7c","sha1":"1611d120ae18220245d9707a333cd44ca1d91ad2","sha256":"c7c5ae14cac8549503b60690c73aaaf9bfff569422ab41bc27f18b9cce54fc9b","sha512":"e369f30e51e3c4a9bcb22e60c9deebd1b07b60b3113b04ed94505da4957bdc39959db5b8092b636cf037078f2e3fe5bc815ffdd99ced4798eb9e17746ccef511","ssdeep":"192:gknWfIGPAAW24GSeY7WJzI3KcG6UrwW8uAh8BANbbGoEbhCnaMFX5sDTpG5FF:bnWwT724ppWpyKjd8wAhyL1icDT+P","tlshash":"9752a045f8522e00c8482d036d9990d76f7b9fc86f92e189f8d89c1b2f643f9c958ec9","first_seen":"2024-08-22T17:16:28.660334Z","last_seen":"2026-07-21T13:13:14.702641Z","times_seen":151,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/footer-logo-sprite-3.150ba99c6fa2a0b159c8.png","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:41.900Z","timestamp":1784639561900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /footer-logo-sprite-3.150ba99c6fa2a0b159c8.png HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/crs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Jul 2026 13:12:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Jun 2024 02:55:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94546\r\ndate: Tue, 21 Jul 2026 13:12:41 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":94546,"size_decoded":94793,"mime_type":"image/png","magic":"PNG image data, 1852 x 80, 8-bit/color RGBA, non-interlaced","md5":"c88cef360ac71292f3b7d36bf0b26abb","sha1":"55094e60a295a6a34fe27cd0d2912a7da0ce5912","sha256":"517d3d2c4a3c32618e99fa6f33fb0643ca8efa4008e1fa46ca2ee4614b55d1f7","sha512":"9c84e4f9d757c971ef01ea2d9123622e4ea4a0d1bac861b40319fa7814e6a1b3bb6de97350f55742546270636cd37082a53469a981b201b0ded360149c6fa905","ssdeep":"1536:PZ/FvzN+9Tl8GVbrt2vIMju2q8DRSiBRLVeg+ljAJVzTmIJruc96/pb3:PZdLgbVbJEIMfq8siB1VeOJV/mGH6hr","tlshash":"429302a8d3acbc166dce8ba0980c6fd610401ebed2e75530be9f09535ca536c7e3b415","first_seen":"2024-08-22T17:16:28.671841Z","last_seen":"2026-07-21T13:13:14.703188Z","times_seen":135,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crsor.ve1.shop/assets/base/fonts/fonts/e388ac99-8c6a-4451-8690-1d15b4d45adb.woff","fqdn":"crsor.ve1.shop","domain":"ve1.shop","tld":"shop"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crsor.ve1.shop/crs/","date":"2026-07-21T13:12:42.186Z","timestamp":1784639562186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ve1.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 16:16:57 GMT","end":"Sat, 10 Oct 2026 16:16:56 GMT"},"fingerprint":{"sha1":"1E:A5:D6:AD:3F:31:52:86:9A:DB:C0:1D:06:CC:F3:0E:5A:83:E1:C1","sha256":"DA:6B:49:F4:F7:0F:DA:2F:C8:79:9A:A8:EC:14:A9:D4:50:C9:68:8B:EF:05:C3:D4:2E:C4:B4:E6:83:E3:CE:E1"}}},"request":{"raw":"GET /assets/base/fonts/fonts/e388ac99-8c6a-4451-8690-1d15b4d45adb.woff HTTP/1.1\r\nHost: crsor.ve1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crsor.ve1.shop/assets/CSS/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Tue, 21 Jul 2026 13:12:42 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":796,"size_decoded":984,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-07-21T21:25:13.244538Z","times_seen":52142,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"crsor.ve1.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"crsor.ve1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}