{"report_id":"4d0be9e2-e3a4-408a-b884-5bcc7382d1e9","version":0,"status":"done","tags":[],"date":"2026-09-02T20:30:42Z","url":{"schema":"http","addr":"firecrystalscribe.com/","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":0,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"firecrystalscribe.com/","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"title":"Firecrystal Scribe Homepage","dom":{"size":62981,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62979), with no line terminators","md5":"70896c869f1a48e736cc7973416ca72b","sha1":"f29c94edbd57bd68b5a5181d2415610c5e8bd196","sha256":"1c06e829d5def9287c6167ced0df1a2677688147e1cd30c16f5bbf53fe20cf16","sha512":"7ac662d6cccdd64e7c9fcaace0934c0104fc98fa053aa8008a6cc5dd4713edadebb0a46b1260015b711f8df2a543a08fcc7dcbd6d8d4f9f14b504ee9336d79e0","ssdeep":"384:S1MVbOmiCGzH1uI8AONUgsI8rs6nGhm7qc5Vul+hSy8NF5xnZb8RE9ksBue6v8DZ:S1MBo98Aj1S15xZxkYj2YjNAx1A","tlshash":"9f530276051ed408daa78d9231cebf17781a503591aa1476d92d4cec8efbc3b03e5b29","dom_hash":"domhasha5899b4962b39a2585f1fedb5dea725d","first_seen":"2026-09-02T20:30:47.833373Z","last_seen":"2026-09-02T20:30:47.833373Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"firecrystalscribe.com/","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":0,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T20:30:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"firecrystalscribe.com","ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"domain_registered":"2023-03-29","domain_rank":0,"first_seen":"2026-07-05T04:08:25.089415Z","last_seen":"2026-07-05T04:08:25.089415Z","alert_count":60,"request_count":12,"received_data":499207,"sent_data":5939,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":5,"received_data":73472,"sent_data":2775,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":1,"received_data":24156,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/chunks/pages/_app-85d469de818ee22d.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"26627bc41d89b03114f681c6291e30fb","sha1":"c701920dabcfa2281aa1ccf7837c691e918d437c","sha256":"12e74a64b1472f6dbe148de49a05c4657b858c8892fc669a26ad1fcbebbc0572","sha512":"c7fc3bf62086169b0ee3983a67cf253a5e61530c4670d4bf0a71c4a448bd6a335843fde366e42bf1d64c099a32ea99e56e37c0e124fcfb0afebcd479681c6076","ssdeep":"768:NITBG6hcfMffZM+iK1+RRnwrUsQS5vBJXxX7CMPA9q4y0AAoqsBgA6zNfGMUFYkq:NIhh0MnZ6K1SNsQyvBJXxX7CMPA9q4yw","tlshash":"56233b5832c3b055439780e6447f114ef23e2819580d4ca9f6b5f8e279b899da2b3ff9","size":48019,"data":"","first_seen":"2026-09-02T20:30:47.85282Z","last_seen":"2026-09-02T20:30:47.85282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/chunks/pages/index-94ab21d6fd14613c.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6cd037f65f44d8e3d8046d4c4a11663","sha1":"a52a9ec6fac4a7d7995bda283250a16c1fe0cb6b","sha256":"b2f1b811172f7893084936119cbe17bd5599e40d5a8bec2dc1d479019ce22135","sha512":"1cddb276b9b0490e2aee6058d868725ef11c8f71a4745309713cb5c93b09b1f3cfc1e45612ac897358adc9d784159b26e22c2ad40616452fe0c21e804d439376","ssdeep":"","tlshash":"de41fe02f58d72d5792b048e403b745c667f65baa54a06f8b4e4d8343d9d0ac3693fcd","size":2214,"data":"","first_seen":"2026-09-02T20:30:47.854079Z","last_seen":"2026-09-02T20:30:47.854079Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/Xiq2Hjk6cvI7mbY6d2sNf/_buildManifest.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d3bda6197b8591fb309c78bb8fb9440","sha1":"10067d66a0ddc7a8e226af8d3040a2527b2ac3d8","sha256":"35f93dc5518d7bf80030154361c950d81bc0c3e15c495c72eff109daca1ffc90","sha512":"7268354e5bf2a0f8568f70949ea0ae037479c5aa698ca08005ae82b4839198aa13c5694a5e6665aaf4a51e226ec6d6733a9a936d6c88e310390e0a1984dbbedf","ssdeep":"","tlshash":"d7f0e59b461ee8121ef6ec88772b5b729f50953615380b17a26c5e684a811a68f4e832","size":476,"data":"","first_seen":"2026-09-02T20:30:47.855433Z","last_seen":"2026-09-02T20:30:47.855433Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/Xiq2Hjk6cvI7mbY6d2sNf/_ssgManifest.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f804693f090e4d8a16053e88843fed0","sha1":"48e5fcf9691f07f24c8ae045f1d904ee07fa4234","sha256":"0ce574c14d6c8d7b456cded201fa880c68ea44aefdde91af77893e508f1a1ffc","sha512":"5adac0ed66cdff01ab5da2a55319b998961b0dbcf46ac3a659e1492fcbc4b3cfee7b0d398dabc15e9c2abee511a0914ebfa4fe47046b4d57939c279c9826c022","ssdeep":"","tlshash":"e0b002f1807ddc70ee73dd1c5a715b639f605117966d68d3cdfd6055c1351410700d51","size":104,"data":"","first_seen":"2026-05-19T03:53:17.317662Z","last_seen":"2026-09-02T20:30:47.843513Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/chunks/webpack-f164db4954bac6ec.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7499c3eac7d2fda824db0f596db9f40","sha1":"9a500daaef7655d2ed0a8ff4e57febb019cf0194","sha256":"492cf2f9596284c12d9d8bfc8e4cca8b4cf6ea5b3f38be52a3714ff43649cf90","sha512":"e540981bd92a2f8377e3b45411d89c4f7f91ee71e837602538fc17848dbf41717b46c76cf6070def23321034a5c933cda304cef485598b139501c7c65af98ac8","ssdeep":"","tlshash":"a931b4ca3291f8e81746b864482f8097f03799b3047d99f1eb11d1f67c311a94236f7a","size":1618,"data":"","first_seen":"2023-05-07T18:02:38Z","last_seen":"2026-09-02T20:30:47.838237Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/chunks/framework-ecc4130bc7a58a64.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"6467a3dbdbf4c598f8e58e4219209026","sha1":"249bf6933a68d57c9571dffbf9cc40f5d48c3795","sha256":"761e9329d5dc491a063f81ea1dedaec335826413f3d7a7724d6b9f2ecc5e46f3","sha512":"75f32cf462fc9ddcc5b366e5cbd32d37525e29fcb102ae11acf2afec6de59739e992b2c56dc39805c4b84a2fabc781c6652f3ca518738b629349b638b96efebb","ssdeep":"1536:2Yjv9NX6lMuubFHHsje9N6SAk1SCocnIEdRMQ5:Dj3b536SJ1S8fvf5","tlshash":"1fd3f9e83996f6526ab311a700af2803737d1a1b240c4960e215fd9e75b842fb17bfdd","size":140942,"data":"","first_seen":"2024-05-18T23:30:25Z","last_seen":"2026-09-02T20:30:47.839635Z","times_seen":791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/chunks/main-ded5d26388e3b472.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"748b71e93e863eecfcaf7c20207cbe78","sha1":"7dbc33fe474d0a7e330931c5bf4bb0dac916d1ed","sha256":"6b065e9f79daaedc005ea825a904716679533c327c601ff61a90e4494987c818","sha512":"7b3bbac0fab6ed0321ca9cd57b10e4ecf03c6ba67deb966a36b7407b856f7ad9f0f595700b5ea4a974c60a32311a127a720d242fca7ed1fad52c6eb040316414","ssdeep":"1536:10KPQDlfYtA1uQIuFXDt5M2wizNQ4sBrzlVdde6L2yJ6:CVYtyhZRwaNXqzlxe6LtJ6","tlshash":"e4b3f9b6b6d1f8a203c741d4843b0006f36a1dbe146f6045b3aadcd6b96499e90f3f79","size":109894,"data":"","first_seen":"2026-01-28T14:16:09.577832Z","last_seen":"2026-09-02T20:30:47.846766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/css/bb010e1231145473.css","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.664Z","timestamp":1788381011664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET /_next/static/css/bb010e1231145473.css HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=1333600, public\r\nexpires: Wed, 09 Sep 2026 20:30:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 09 Aug 2026 03:17:32 GMT\r\netag: \"06a77f14c-0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 742\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2101,"size_decoded":1249,"mime_type":"text/css","magic":"ASCII text, with very long lines (2101), with no line terminators","md5":"6272ca205e94409b5d852ca0b7f4279d","sha1":"1f5a8ebd68e2a12ee3b598bdd5659bda322a328a","sha256":"6ab71b0e58f6d073b048dc9b61bbe4472cb23db11de7fa97e1159bd0ff761b47","sha512":"5e6ef852c92a22b4a5d7f3fd14ada1285d6d02ccd3a99592f2c5ca669a0f0805af74a0218870f62a1fa1b3d1fc34c5a6ffea8b16fbe8432d5552dd2668705b32","ssdeep":"","tlshash":"224154b307402664a773cd277ad67b5435302433c562b5e6e050ecb4cbda8663e6d74d","first_seen":"2026-09-02T20:30:47.836647Z","last_seen":"2026-09-02T20:30:47.836647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/chunks/webpack-f164db4954bac6ec.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.665Z","timestamp":1788381011665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET /_next/static/chunks/webpack-f164db4954bac6ec.js HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 09 Aug 2026 03:17:29 GMT\r\netag: \"06a77f149-0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 783\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1333600, public\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1618,"size_decoded":1199,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1618), with no line terminators","md5":"d7499c3eac7d2fda824db0f596db9f40","sha1":"9a500daaef7655d2ed0a8ff4e57febb019cf0194","sha256":"492cf2f9596284c12d9d8bfc8e4cca8b4cf6ea5b3f38be52a3714ff43649cf90","sha512":"e540981bd92a2f8377e3b45411d89c4f7f91ee71e837602538fc17848dbf41717b46c76cf6070def23321034a5c933cda304cef485598b139501c7c65af98ac8","ssdeep":"","tlshash":"a931b4ca3291f8e81746b864482f8097f03799b3047d99f1eb11d1f67c311a94236f7a","first_seen":"2023-05-07T18:02:38Z","last_seen":"2026-09-02T20:30:47.838237Z","times_seen":30,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/chunks/framework-ecc4130bc7a58a64.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.667Z","timestamp":1788381011667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET /_next/static/chunks/framework-ecc4130bc7a58a64.js HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 09 Aug 2026 03:17:29 GMT\r\netag: \"06a77f149-0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 43659\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1333600, public\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140942,"size_decoded":44077,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"6467a3dbdbf4c598f8e58e4219209026","sha1":"249bf6933a68d57c9571dffbf9cc40f5d48c3795","sha256":"761e9329d5dc491a063f81ea1dedaec335826413f3d7a7724d6b9f2ecc5e46f3","sha512":"75f32cf462fc9ddcc5b366e5cbd32d37525e29fcb102ae11acf2afec6de59739e992b2c56dc39805c4b84a2fabc781c6652f3ca518738b629349b638b96efebb","ssdeep":"1536:2Yjv9NX6lMuubFHHsje9N6SAk1SCocnIEdRMQ5:Dj3b536SJ1S8fvf5","tlshash":"1fd3f9e83996f6526ab311a700af2803737d1a1b240c4960e215fd9e75b842fb17bfdd","first_seen":"2024-05-18T23:30:25Z","last_seen":"2026-09-02T20:30:47.839635Z","times_seen":791,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/images/site/firecrystalLevels/F1C1-512.webp","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.684Z","timestamp":1788381011684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET /images/site/firecrystalLevels/F1C1-512.webp HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:30:11 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 09 Aug 2026 03:17:10 GMT\r\netag: \"06a77f136-0;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 33250\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33250,"size_decoded":33657,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be0951270159aef2b12609e63ed1b44a","sha1":"4ce8a4efb41bc94ca22f514f69b8c66af6337f71","sha256":"422d127f10859e221c6029b4bc6d78d4ba4d5945b8d1ad71ffa3ef6288530d57","sha512":"76c4567ff56715f1265a7f877d23607058707f699f36be8b670dbeb91ad5933ab919ff98139bc1619260f536cfb3da88d557a16d3a7c31bf2e0fdbfc9dbb0bb1","ssdeep":"768:sdgtcyHvf12DMR3T7XCHLgz4Z2cXUstc7NzsQdaMnabIoI:NtRP9J3TWHsz4Z2ckstcZVdHn5","tlshash":"92e2e1302a7e33f56c69b6a48fe6b611ddcdc1cda0ba57948d39b287644a33349c8307","first_seen":"2026-09-02T20:30:47.8412Z","last_seen":"2026-09-02T20:30:47.8412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRCf_0uYVKwOs1to.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.828Z","timestamp":1788381011828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRCf_0uYVKwOs1to.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://firecrystalscribe.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:16:16 GMT\r\nexpires: Fri, 27 Aug 2027 10:16:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 555235\r\nlast-modified: Tue, 16 Sep 2025 13:47:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7756,"size_decoded":8568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7756, version 1.0","md5":"b36a9db584f2638f8555cb698d0c36e8","sha1":"1802bba8a855b40b850ad5f70a21e9181bfcb05e","sha256":"97e09475c68fc057c188cf966fdd0f7318be51ebed937ae83e18417dfe1b8321","sha512":"b1ef41265caec1023d17ca90acb0e7dd0107c5ff4dbc596e981fb1a2f6cfc594c985122e7277f741e27883461f0e423f1ea7ccbef560476e35beafc665f6f0a6","ssdeep":"192:AobbaqhA7ECfuVbEOfpPp8w9VvbBKAwUXi4XfPnj5:zb7Z3bEOfpPp8wTvbwF4vvj5","tlshash":"bef1ae010b59b385de8830bb139e5b8c2c2f37ad7c67d1cc12784abda9b78216d54699","first_seen":"2025-05-06T15:18:54.860418Z","last_seen":"2026-09-02T20:30:47.842871Z","times_seen":164,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/Xiq2Hjk6cvI7mbY6d2sNf/_ssgManifest.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.676Z","timestamp":1788381011676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET /_next/static/Xiq2Hjk6cvI7mbY6d2sNf/_ssgManifest.js HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 09 Aug 2026 03:17:33 GMT\r\netag: \"06a77f14d-0;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 104\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1333600, public\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104,"size_decoded":475,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"7f804693f090e4d8a16053e88843fed0","sha1":"48e5fcf9691f07f24c8ae045f1d904ee07fa4234","sha256":"0ce574c14d6c8d7b456cded201fa880c68ea44aefdde91af77893e508f1a1ffc","sha512":"5adac0ed66cdff01ab5da2a55319b998961b0dbcf46ac3a659e1492fcbc4b3cfee7b0d398dabc15e9c2abee511a0914ebfa4fe47046b4d57939c279c9826c022","ssdeep":"","tlshash":"e0b002f1807ddc70ee73dd1c5a715b639f605117966d68d3cdfd6055c1351410700d51","first_seen":"2026-05-19T03:53:17.317662Z","last_seen":"2026-09-02T20:30:47.843513Z","times_seen":2,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ3q5d0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.824Z","timestamp":1788381011824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ3q5d0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://firecrystalscribe.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14168\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:02:27 GMT\r\nexpires: Sat, 28 Aug 2027 18:02:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 440864\r\nlast-modified: Mon, 15 Sep 2025 17:11:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14168,"size_decoded":14981,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14168, version 1.0","md5":"017598645bcc882a3610effe171c2ca3","sha1":"ceaca8172b95b6954d5a5752698a5162d7e9877c","sha256":"7a7ce1a34f3e9944fe88fc61abbc93b6db383afa2b90815fd7ccea456fbce4e5","sha512":"cadb36cbcdcd7e84ee9305a676f4d8d3b19fc199481835b726fbcd20f2463074908040b7aca60e284b5ab8ab3b03798f38cc06873d6e4b06ddf7a018e6c666d8","ssdeep":"384:cIeFsvkj/uwoczzNcnQzpjJSx7MZBEuNdu:ihxhzsQ9YxEEQg","tlshash":"bb52e181361151524c851f6d3784c3efec1118dff2acaae07e22255506fe4f276be92b","first_seen":"2023-05-06T05:46:29Z","last_seen":"2026-09-02T23:04:15.250041Z","times_seen":8318,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T20:30:10.634Z","timestamp":1788381010634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sun, 09 Aug 2026 03:17:07 GMT\r\netag: \"06a77f133-0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6105\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67255,"size_decoded":6554,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (58998)","md5":"def65defa1b8da7a1c9e56531e68e0aa","sha1":"65728185c63dcf13908a46905e3ab4548a71dd8b","sha256":"341f30f84a618542408b56917a15de4dd6d8a447b54ff2f5b629c16b8ea20028","sha512":"b4ce40daac507376d648859d4d40e9ebd7678690fac2ab887e3bf6222a675eb93d9b52d21db14bc89b541b3ebdb3c6396b26623b839869594fdd9abdf3ef0cc1","ssdeep":"384:3G9ibUbId9zZmiCGzH1uI8AONUgsI8rs6nGhm7qc5Vul+hSy8NF5xnZb8RE9ksBw:3G9IUbId9zF98Aj1S15xZxUx1b","tlshash":"9a630376061ad408d6a78d9331cebf177c1a503691aa1566d92d4cec8efbc3b03e5b2c","first_seen":"2026-09-02T20:30:47.845482Z","last_seen":"2026-09-02T20:30:47.845482Z","times_seen":1,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":28,"connect":103,"send":0,"wait":114,"receive":0,"ssl":215},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/chunks/main-ded5d26388e3b472.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.668Z","timestamp":1788381011668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET /_next/static/chunks/main-ded5d26388e3b472.js HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 09 Aug 2026 03:17:29 GMT\r\netag: \"06a77f149-0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30549\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1333600, public\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109894,"size_decoded":30967,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"748b71e93e863eecfcaf7c20207cbe78","sha1":"7dbc33fe474d0a7e330931c5bf4bb0dac916d1ed","sha256":"6b065e9f79daaedc005ea825a904716679533c327c601ff61a90e4494987c818","sha512":"7b3bbac0fab6ed0321ca9cd57b10e4ecf03c6ba67deb966a36b7407b856f7ad9f0f595700b5ea4a974c60a32311a127a720d242fca7ed1fad52c6eb040316414","ssdeep":"1536:10KPQDlfYtA1uQIuFXDt5M2wizNQ4sBrzlVdde6L2yJ6:CVYtyhZRwaNXqzlxe6LtJ6","tlshash":"e4b3f9b6b6d1f8a203c741d4843b0006f36a1dbe146f6045b3aadcd6b96499e90f3f79","first_seen":"2026-01-28T14:16:09.577832Z","last_seen":"2026-09-02T20:30:47.846766Z","times_seen":2,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/images/site/firecrystalLevels/F1C1-860.webp","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.685Z","timestamp":1788381011685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET /images/site/firecrystalLevels/F1C1-860.webp HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:30:11 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 09 Aug 2026 03:17:10 GMT\r\netag: \"06a77f136-0;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 62350\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62350,"size_decoded":62757,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"88cdf043b4d79895e610ae53fde28dc5","sha1":"3cf46028fa633dc797aca7078b98d7e408ef996b","sha256":"c08434bff61a4400113b3ede73f04435bf244cf1568b774970478b958216c19a","sha512":"05a1af9eb620357ab96e270cd4b650568616878df84add4b4311e02c54846126ee8f97a842f132582f9badf57f63830b0eb3bb2b1d7fe9c4940636ba372382c0","ssdeep":"768:PCvBS0+w4b4MtkrbNFS5hOlVUM7n9QpveDVQjQ/bUS8b4JcTk1+H0PW8M77dlo+p:qv1+whMmnvmOnGMVbUFkJBLedCGeos0","tlshash":"a65302c05fdaa18ddf6ee4465544bae0d7a4c54c6c2a8894a4704b2d7cef133d8706fb","first_seen":"2026-09-02T20:30:47.848302Z","last_seen":"2026-09-02T20:30:47.848302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/junge/v26/gokgH670Gl1lUpAatBFZSWKn.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.829Z","timestamp":1788381011829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/junge/v26/gokgH670Gl1lUpAatBFZSWKn.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://firecrystalscribe.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 19:57:35 GMT\r\nexpires: Thu, 02 Sep 2027 19:57:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 1956\r\nlast-modified: Wed, 10 Sep 2025 16:54:30 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13608,"size_decoded":14419,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13608, version 1.0","md5":"99071a9c58e4131471d61b75db03b1d8","sha1":"d4a9a040bcf04ac067a1483d502db90d0a20e97b","sha256":"fca36584ae4ad73d87b3de22b0e066cb354708b83a3f5aed121ad6b5b140ede0","sha512":"1a069ff1d2e80b7676df6902cea125de2ea4ee0069ba482b1d26539e851e5aab4e8ba9ec0fb44f54f17d9ad8e3419cbe7b0117dfb95ddfa12cc91b07dffbcbc3","ssdeep":"384:C/+Yx0WKJV8tDfziAC6XtEitv4LOovwdN3eg9v:PYxgOhbiABpV4LTvA3ee","tlshash":"1352c01e06fd4a89c3d81371a1f89475dd24bce1e750a2ed3c247c98fa6122de98e71c","first_seen":"2025-06-23T01:37:07.316166Z","last_seen":"2026-09-02T20:30:47.850075Z","times_seen":9,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/katex@0.13.11/dist/katex.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.662Z","timestamp":1788381011662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/katex@0.13.11/dist/katex.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://firecrystalscribe.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 0.13.11\r\nx-jsd-version-type: version\r\netag: W/\"5b4f-IeVhu9sVoGxy3IBT6LWHaoYvqpE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nage: 1777503\r\nx-served-by: cache-fra-eddf8230110-FRA, cache-bma-essb1270037-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3394\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23375,"size_decoded":4175,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23374)","md5":"4ff918ea95c0a931061526b3b7a6e698","sha1":"21e561bbdb15a06c72dc8053e8b5876a862faa91","sha256":"84502642dd9d1a4e86f7d9eed9c116cfcff524646704ffc1b06a19c10ed678b1","sha512":"27c8ded9282b0b303b84d05e88226203aa044c74d3769dd67b712b88e809a7a3cec9c18b7035e3e5d4b05a500f41c60679a438377b9fdf468e83f36de69c56da","ssdeep":"192:fMCll0weFl1zkMPgefBEALkLiqRd2s3cnNlsBRrUco7lcCSjyXo:UTkMPgefBEA4LiqRd2s3cnNU5o5yR","tlshash":"38a24b0bb39a2b13b95d4d39b09b23f029952a1cf211c553a5ac92618cd2c7f059fbfd","first_seen":"2023-07-04T11:43:35Z","last_seen":"2026-09-02T20:30:47.851505Z","times_seen":47,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":10,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/chunks/pages/_app-85d469de818ee22d.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.669Z","timestamp":1788381011669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-85d469de818ee22d.js HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 09 Aug 2026 03:17:30 GMT\r\netag: \"06a77f14a-0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17356\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1333600, public\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48019,"size_decoded":17774,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (48019), with no line terminators","md5":"26627bc41d89b03114f681c6291e30fb","sha1":"c701920dabcfa2281aa1ccf7837c691e918d437c","sha256":"12e74a64b1472f6dbe148de49a05c4657b858c8892fc669a26ad1fcbebbc0572","sha512":"c7fc3bf62086169b0ee3983a67cf253a5e61530c4670d4bf0a71c4a448bd6a335843fde366e42bf1d64c099a32ea99e56e37c0e124fcfb0afebcd479681c6076","ssdeep":"768:NITBG6hcfMffZM+iK1+RRnwrUsQS5vBJXxX7CMPA9q4y0AAoqsBgA6zNfGMUFYkq:NIhh0MnZ6K1SNsQyvBJXxX7CMPA9q4yw","tlshash":"56233b5832c3b055439780e6447f114ef23e2819580d4ca9f6b5f8e279b899da2b3ff9","first_seen":"2026-09-02T20:30:47.85282Z","last_seen":"2026-09-02T20:30:47.85282Z","times_seen":1,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/chunks/pages/index-94ab21d6fd14613c.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.671Z","timestamp":1788381011671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-94ab21d6fd14613c.js HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 09 Aug 2026 03:17:30 GMT\r\netag: \"06a77f14a-0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 872\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1333600, public\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2214,"size_decoded":1288,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2212), with no line terminators","md5":"c6cd037f65f44d8e3d8046d4c4a11663","sha1":"a52a9ec6fac4a7d7995bda283250a16c1fe0cb6b","sha256":"b2f1b811172f7893084936119cbe17bd5599e40d5a8bec2dc1d479019ce22135","sha512":"1cddb276b9b0490e2aee6058d868725ef11c8f71a4745309713cb5c93b09b1f3cfc1e45612ac897358adc9d784159b26e22c2ad40616452fe0c21e804d439376","ssdeep":"","tlshash":"de41fe02f58d72d5792b048e403b745c667f65baa54a06f8b4e4d8343d9d0ac3693fcd","first_seen":"2026-09-02T20:30:47.854079Z","last_seen":"2026-09-02T20:30:47.854079Z","times_seen":1,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/_next/static/Xiq2Hjk6cvI7mbY6d2sNf/_buildManifest.js","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.674Z","timestamp":1788381011674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET /_next/static/Xiq2Hjk6cvI7mbY6d2sNf/_buildManifest.js HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 09 Aug 2026 03:17:33 GMT\r\netag: \"06a77f14d-0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 255\r\ndate: Wed, 02 Sep 2026 20:30:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1333600, public\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":476,"size_decoded":671,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (476), with no line terminators","md5":"5d3bda6197b8591fb309c78bb8fb9440","sha1":"10067d66a0ddc7a8e226af8d3040a2527b2ac3d8","sha256":"35f93dc5518d7bf80030154361c950d81bc0c3e15c495c72eff109daca1ffc90","sha512":"7268354e5bf2a0f8568f70949ea0ae037479c5aa698ca08005ae82b4839198aa13c5694a5e6665aaf4a51e226ec6d6733a9a936d6c88e310390e0a1984dbbedf","ssdeep":"","tlshash":"d7f0e59b461ee8121ef6ec88772b5b729f50953615380b17a26c5e684a811a68f4e832","first_seen":"2026-09-02T20:30:47.855433Z","last_seen":"2026-09-02T20:30:47.855433Z","times_seen":1,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cinzel/v26/8vIJ7ww63mVu7gt79mT7PkRXMw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.822Z","timestamp":1788381011822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/cinzel/v26/8vIJ7ww63mVu7gt79mT7PkRXMw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://firecrystalscribe.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25888\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 06:08:03 GMT\r\nexpires: Fri, 27 Aug 2027 06:08:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 570128\r\nlast-modified: Tue, 09 Sep 2025 18:57:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25888,"size_decoded":26701,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25888, version 1.0","md5":"7a5ca92015241c3c4667e78d6071dbfc","sha1":"97f503ba447f5fdf5b1edeb75791000d07bf10e8","sha256":"ef95296c778719c3d658a8284d65078100450948851b9114485ada01d9d3d3f8","sha512":"44423669822c606dfde3fe02573baf604dfdbfea2d2fd102f6c9eba6a3782901cc1ce25ffa98866c6c2965242714d9154e4145fd2f469930c4921890a9396352","ssdeep":"384:mOUmGSAhr/VTSIBvJfukAYJCLHZt7f96DZiFmWf2wv6nTUzdzH5igW9LYxSuCK:XUmG7DVT/h8BLZtb0DM92wv6nmW9q1B","tlshash":"1cc2f13b1fedbe64d84a827e045f87d82bda014836cf6884edb2e657683c46f0f44505","first_seen":"2025-09-20T07:52:44.032568Z","last_seen":"2026-09-02T20:30:47.856644Z","times_seen":592,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":36,"send":0,"wait":27,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwTs5juQtsyLLR5jN4cxBEoTJzax8s3Jik.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:11.826Z","timestamp":1788381011826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwTs5juQtsyLLR5jN4cxBEoTJzax8s3Jik.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://firecrystalscribe.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7992\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:33:47 GMT\r\nexpires: Thu, 02 Sep 2027 10:33:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 35784\r\nlast-modified: Tue, 16 Sep 2025 13:42:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7992,"size_decoded":8803,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7992, version 1.0","md5":"9ad68cbfaf66456becdf59a96c2e4b6b","sha1":"e46fe99869dc963c0c3ebe8e44524ed1d1298974","sha256":"ebb1ed9db7ef6edca7f296f0e066319ed40e061119d85441946200964ae69fd9","sha512":"6035ed5b1fc7d936004e404a4b4382a209c95933ce5520af50e3cf3f69eb2dddd17269918ff431bbcd2a0a07dc317bd76d408256bd933c13a50be1e2fd6620a0","ssdeep":"192:VrDt+SGXDJjx5eihOwgCi1sWJaaYLib3+CEXSJvdPu8:Vf65eihTgCieWdYmbuCFZF","tlshash":"c7f19e94dc7e0d1dc9974e3b83e40aa53ec17dd4c14dc4a76749168eda252bfa12a284","first_seen":"2025-05-06T15:18:54.973544Z","last_seen":"2026-09-02T20:30:47.857267Z","times_seen":169,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firecrystalscribe.com/favicon.ico","fqdn":"firecrystalscribe.com","domain":"firecrystalscribe.com","tld":"com"},"ip":{"addr":"198.72.126.220","port":443,"asn":32613,"as":"IWEB-AS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firecrystalscribe.com/","date":"2026-09-02T20:30:12.348Z","timestamp":1788381012348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firecrystalscribe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 02:35:09 GMT","end":"Tue, 27 Oct 2026 02:35:08 GMT"},"fingerprint":{"sha1":"D8:83:60:19:79:C8:13:73:FD:B9:EE:73:BE:54:67:73:37:3F:28:9B","sha256":"B0:52:82:72:E3:B1:24:3A:2C:3E:62:80:9C:BC:CD:39:CE:77:CC:84:93:74:DF:18:2C:D9:B8:7C:76:40:EC:3A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: firecrystalscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firecrystalscribe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=1333600, public\r\nexpires: Wed, 09 Sep 2026 20:30:12 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 09 Aug 2026 03:17:06 GMT\r\netag: \"06a77f132-0;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 25931\r\ndate: Wed, 02 Sep 2026 20:30:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":26341,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-09-02T23:23:32.507811Z","times_seen":43698,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"firecrystalscribe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"firecrystalscribe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}