{"report_id":"1da67c57-b243-4855-a3c0-85abd72cc274","version":6,"status":"done","tags":[],"date":"2026-05-15T19:37:24Z","url":{"schema":"http","addr":"lobstrsupport.web.app/","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"lobstrsupport.web.app/","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"title":"LOBSTR — Simple and Secure Stellar Wallet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lobstrsupport.web.app/","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-19T19:37:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.chaport.com","ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":87646,"first_seen":"2015-08-24T06:07:03Z","last_seen":"2026-05-11T20:46:18.973766Z","alert_count":0,"request_count":3,"received_data":4067,"sent_data":1463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"dashboard-assets.dappradar.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-02-03","domain_rank":0,"first_seen":"2020-07-18T21:06:09Z","last_seen":"2026-05-14T18:53:31.849503Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":546,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.37.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-10T22:41:13.190184Z","alert_count":0,"request_count":3,"received_data":315924,"sent_data":1493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.chaport.com","ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":504466,"first_seen":"2024-01-31T17:02:32Z","last_seen":"2026-05-14T18:53:31.748087Z","alert_count":0,"request_count":1,"received_data":84455,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lobstrsupport.web.app","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-14T18:53:30.030497Z","last_seen":"2026-05-14T18:53:30.030497Z","alert_count":282,"request_count":141,"received_data":6393906,"sent_data":64858,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Popper:2.11.8","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"static.lobstr.co","ip":{"addr":"104.20.40.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-11-21","domain_rank":0,"first_seen":"2019-05-21T09:35:01Z","last_seen":"2026-05-14T18:53:31.837849Z","alert_count":0,"request_count":9,"received_data":1394594,"sent_data":4277,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":3,"received_data":106589,"sent_data":1625,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lobstrsupport.web.app/files/script.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad54ef311bf716c1df2941d454d8de96","sha1":"0db1fcc66060a969aa82fb9fae457b6e66d9933a","sha256":"965387ce9489d0167cf33444ab52d064bb3fab35e94b12082ff5eb00a34c070c","sha512":"bd12169fdf87e0ac39a4b3a87f947f2fafb9f524843e7c97fcffe91b756f2a49ca38778ac99d6f14a5f5989d0a33f502658c55b95c1fbd2a0a7025a605138abd","ssdeep":"","tlshash":"38215faba80276758c70e1a7a63f371235272669640894235000d6632824a8fc379ecd","size":1386,"data":"","first_seen":"2024-05-23T20:15:09Z","last_seen":"2026-08-09T01:39:46.705772Z","times_seen":1629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/sliderInitializer.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c3864e5bbac6980e1754f73cc151df0","sha1":"5ddaeb25642b8c78412c7f3de01ac21e92c4d071","sha256":"342e39c3040e8ff31f687887755b891598fcc6bd6163bc38e8ab77f8fc707b8a","sha512":"a8578d5ba7f8dcae703aef6c012182f0d8a4e9ec7b1a37911e17dea4d409886fa9faad28671508c46112eecfa33e0f8f23f613538f8d3c84de6550161a2b786d","ssdeep":"","tlshash":"7ae0121d69b80461153370380e6ea104ed19a0479d59fc61bf8e95d06f5c32f66fb7c8","size":431,"data":"","first_seen":"2025-05-05T16:39:57.239Z","last_seen":"2026-05-15T19:37:38.924995Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/output.6091837a4079.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c62a25cdef07757e146cc6d9c52610cc","sha1":"61d2680233d8cab303b21310d90915ab43bf7d9f","sha256":"6091837a4079beea913424223e56b95ea4fd86e4f467e6d9a5a6d59331d8d690","sha512":"9d18273051836b911a6a71bb68c43fa36b45929d681e532d09383b5396a9cf3ff0f42023992dbcee3024ab01fde85dfe56137ccdbeceb956b89d5a8154a5c56b","ssdeep":"","tlshash":"13317a1db2023b3a1493925bd06f9e0868b75e518d05c01aeb7583ff1de9048f997778","size":1458,"data":"","first_seen":"2026-03-27T07:10:53.914057Z","last_seen":"2026-05-15T19:37:38.958128Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/main.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55b46eac335e71a545dfde63f0260faa","sha1":"8c5c417776f0c060af6b63f298c5062cceb4167c","sha256":"ad3a2b74d824f2d47072b92101fafa0a6e4d0eb6e18e7cd674b51c22784f556c","sha512":"8fa5b9833869c2f4337852fc5e0c043fe9916bf326e1e9a6a031e7facdf72e9f478c75b08ee75d766d7ca21bc78364fb615feaf268695f9fb4ed5fdebbf7d031","ssdeep":"","tlshash":"95418c4df5b2167454bb36695fffc458b26e4007820cca01ffad06e14f9512ca597a9c","size":1916,"data":"","first_seen":"2025-05-05T16:39:57.203356Z","last_seen":"2026-05-15T19:37:38.954405Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/js/jquery-3.4.1.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88147,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-08-09T06:33:39.778573Z","times_seen":5619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"706b6282fa910f0ddd57e307e3e0cb0c","sha1":"0cdb670e45b6d4b3a5b77b8c9725c90fde143984","sha256":"283d85f487242f1ef9231fb8ed676e8b00d6e422b17138d00e610273cb5b4079","sha512":"a0c01573b034c9d3bcfc5e9f4d6d8a3b9fe369eeb999a28a43acea6dd56981ddb04043fd3350d8d72a627b4357fa5cc7030e924f1b45074283f74b4aea53b872","ssdeep":"","tlshash":"c0d0a71ab9e9430011773115467b95243a67004f1244dd84b58c0ad25f3a389f286789","size":264,"data":"","first_seen":"2025-09-03T14:52:45.615814Z","last_seen":"2026-05-15T19:37:38.991374Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.37.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f63dfbdcc649f13af4791a90e51f7907","sha1":"b3cacef9fccfa42aaebd61f046f2123eca598973","sha256":"60c6bec0033a424572cfdf7da1d5fb94f4719286006a7f2cb9e76ee24d99babf","sha512":"596f3f8f19042ded820221382ef41fc26d6b6a3392f0f1dab020b1fa49c71b48011edf045f14ba4fab494531ae0d056796eb80bccc561788fc48d14329c78b16","ssdeep":"768:QkN++EvGHWyOOY/JaAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7w:QpxY+t/Nhh+1d76KV2O9Ed","tlshash":"6f43b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","size":60577,"data":"","first_seen":"2023-09-22T01:14:35Z","last_seen":"2026-08-09T05:51:56.053476Z","times_seen":2286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/headhesive.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4b4ccedf82fa8d5cebd6327c6191e0b","sha1":"9be5be3b1ec612f5e8f3b0f89042116328c9adda","sha256":"abb97637f93dce2abbbf13b35e057e9c7657b41f0d3dcce5ced279b56f3687e5","sha512":"1a0f7f2562a3f8a821ed4bf9341dc2b65cd89e1dc7e4b3df8a8c9a17fe8f7c75ea2a6f60934874b433cd442c4ee4113e8640be3a6a1f54a1b91c95cdb89a3788","ssdeep":"","tlshash":"6761f19f7281176714e7c2d8613f060e22b28168ac54844c757ddfed9c5855ee4e3fb8","size":3182,"data":"","first_seen":"2023-03-07T12:04:27Z","last_seen":"2026-08-06T18:17:07.588919Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/map_animation.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"75e13c96abda940e09d130110139a47c","sha1":"31581222136e1ffd36b00f272fbc2e0c7af68081","sha256":"3a1832587746bff0cf4e9d847456ce4f724cdce9d523b9ec411bd1f7cb786e06","sha512":"5531f9ecd7e8b7c515f020dd814c7a4ad6ca4e27365b30b7dffc593431914e4b29b5c34a11f0581a83a598a0b8adc8eb8cc24cb3173611bafcdca7c7526615d0","ssdeep":"","tlshash":"d6116b8eafa81022d533233a99ff40005f3558530484eadab75c42e54f2c51c63238e9","size":948,"data":"","first_seen":"2025-05-05T16:39:57.190733Z","last_seen":"2026-05-15T19:37:38.878252Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/output.0d86849d05fe.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86b1804b150775465738a69c2a8bc3d2","sha1":"587de1f104b69a73467d663783a2fef656a1e2ad","sha256":"0d86849d05fef64f1c443de410946770a52f668e818d759ce0abf2f46f2e0e44","sha512":"cf139b664534b5fe5956f2b738718ca314021999baf37e6ea59caea80d03a46e9e7a4a17bb0a65e6df750e6adb14c75f232ef18549164acd2ed4825bb13fc9a8","ssdeep":"","tlshash":"50b0145d531171550345f3fd457f555cc57f450147f341d54301f15415d15f5d010d1c","size":116,"data":"","first_seen":"2023-03-13T13:08:22Z","last_seen":"2026-05-15T19:37:38.900211Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/smartbanner.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"247bab484379bae776edb82564d58ef3","sha1":"b759b415b8e665ad0d712d2a44de9564735c7fe2","sha256":"4a5fdc0d91ddaa2517fe34136a704b7ba64bcf894d504df8bf1487d78bd18f94","sha512":"982c576fe652640b3122c94c9ff084afc70d369cae4b50b42a4a4d54a74094c489bc2bec3178c10e04310f674fed775d6c7c44fec87d69d250336fa5e0a8b03e","ssdeep":"384:77a2F9u7MQPF9uuHPF9uLotT1gIpPF9up+n3YC:77a2F9kPF95PF92aT2kPF9N3YC","tlshash":"3e72944d76e0b170c28351ae515f140bb1b4b976c09ca489f279dae46ff498a43f3f2a","size":17106,"data":"","first_seen":"2024-06-19T12:11:32Z","last_seen":"2026-07-17T09:44:24.571092Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/jquery-3.5.1.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-09T05:33:05.215656Z","times_seen":265977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/owl.carousel.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-09T05:49:33.434932Z","times_seen":66914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/lottie-web.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e21b8cf3a5b4e498374cd4c0e3c35138","sha1":"175adf8b463ba57230aefe1c12c325905a98c067","sha256":"7ba983582919be862a6122e3a8fdad742a1e10ef6f5c9a5c5d84ec53de53d43a","sha512":"efec9d3cff965a04a5ad6588e509f27869eceae358731ecf4d89923b783ad315dbdc8e670411db088ebde63b2a8475678ba240ac551bffcea5fd786e78213283","ssdeep":"3072:+9yA8cMkU1beWvPSIoPanG2QcOXOCZdk5Wb1pmbbM5HK7:+NxU1beWvPSIoPacBe8hQbcHK7","tlshash":"333429597154243845c540ae806f1a0bfb36292e245ac45cb378f4ffa8bce9d31beb79","size":241359,"data":"","first_seen":"2023-03-13T13:08:22Z","last_seen":"2026-05-15T19:37:38.918406Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.37.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","size":20122,"data":"","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-08-09T06:08:11.373088Z","times_seen":12303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","size":998,"data":"","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-08-09T03:17:34.396256Z","times_seen":1857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ed0bcc16e162577858a1bb7bf3a6c78","sha1":"6ac5171b80252bde2bf0f16c7a6a4179f93a6a9c","sha256":"1f0b4b66bf804b220e0d68279f24e151574243f4987ab0cceb887fb76a5bc7bb","sha512":"543ab95d7b5d6fae31726871e3af71641474441390dac97d0c0e52a68e09db868a61d961494309f2d52618f8c0447dc3c253146141f9319b581d99e992fd6188","ssdeep":"","tlshash":"4e418b45f3fa23204a3bb29756fbc3a12724004b8605de28f75c4ac16fa4658ecd178a","size":2368,"data":"","first_seen":"2026-05-14T18:53:46.372051Z","last_seen":"2026-05-15T19:37:38.99228Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/exclude_for_safari.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b7a51b520b8f7a5ebc184d4267dbc5f","sha1":"5f2eb2317293510ea0bd8570b0024b1365d83c8e","sha256":"d01e2f8811d326fcec7aef7d3b924b8520eefae72b662aaf91b7f4ee8e5db20b","sha512":"6f91d9ee54e49ecccfbc459d32fe2c011d4abac3baf1981f857bd6021b502b90aced6077df520e9f4a4c77d92a8f7f3ef286d5eeb8c12c88208ba7511b588b1e","ssdeep":"","tlshash":"f2d0231c49704d1503777797d545124d5c74c457dd1f4145357803d83cf50b10580e77","size":203,"data":"","first_seen":"2025-07-03T21:44:10.486685Z","last_seen":"2026-07-10T08:45:29.46702Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/jquery.magnific-popup.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-09T05:49:33.454751Z","times_seen":73385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=6594b78d07cf651483036d8a","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1361243989f60b7a3f7dbb8801f06b0a","sha1":"67c69aa63dbeb7e9397eb2213fd33ddd73a7670c","sha256":"3c9c789d8acfb89f793587361924531ea4805d919361c9facce4b3a61c3f123b","sha512":"0aec14858c23da8e9648818dd841acd51350a3d5c5b00ade9b40e9da82f1df4c3b4067d67277ea6370aba16ddd5627e4f987bc6b4c90da2df7a7c4ead1c41812","ssdeep":"","tlshash":"78e02b42eb460e161b607765790e1b8774bf83150a44d6a96571df15222acd2503487a","size":383,"data":"","first_seen":"2026-05-14T18:53:46.126284Z","last_seen":"2026-07-16T00:18:26.600368Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-2c12d9cc3ded20e8cf09a901b86f5c68.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b47be60a9205427afaa3db67511ed3a","sha1":"13aba22e343283634526ffa15ffb2ec1e770502b","sha256":"4b15578d1c420a58c1c41c4a88728a887af2540cedcd064f058f92b64299d677","sha512":"7493fe9f50f66a520da4224a3514ee9f8030fae1d79708d17be392c168604c530cf7551f4d8d56659e6d3d59844f053e5b48bfc788962e2f1babc627a54a9d77","ssdeep":"1536:a6VmkhM1hDaYGcvezlk5c6w8N6Od9T2KBjtrEjv4SpkHBKlqWfw2:ZQc4yk5HKp5ffL","tlshash":"898329897040343b0aeb21b6357f310a213fe2696e495460b53ad7d07e7ae5b621bf7c","size":83491,"data":"","first_seen":"2026-01-15T11:14:47.62677Z","last_seen":"2026-08-09T03:17:34.404571Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lobstrsupport.web.app/output.e7f3a42a9678.css","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /output.e7f3a42a9678.css HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5547\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"a529b08d0150f7fc2e15390e057e73b52587aa1b7cf31573277bbb305266957b-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.129577,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35157,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (35157), with no line terminators","md5":"662b1ba25189c6663d0e9675451d95b6","sha1":"60deb14225209a43d76953fcbf337494bdb5e981","sha256":"e7f3a42a9678f12fe29d8eafb328173ba77e834a4477b83d23f548fa3fac2892","sha512":"c361f191838869d6519be36478dfddcda752b07695c4c7bb7e51258a44c5ca2ae29b253f7902161e4ba6038cc16d83599ad5174d54acaca0cf33078be45e5093","ssdeep":"384:mfcrU4T5S6cmgyf//caobgX0DvuSUaakt+:m0rT5S6cmgyybgXFSUv","tlshash":"adf295b25962301cf02b9716f8d0dddcb37cc312d33245eff65a911aca9665722b268e","first_seen":"2026-05-14T18:53:46.238849Z","last_seen":"2026-05-15T19:37:38.815081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/playvideo.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /playvideo.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 250\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"8ec0008269fafcb558607df519503e77ddb36b13575a8ead139d87224f4dd7d3-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.153484,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":405,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51717fcb1ae8ae9e0de850370c6d5fbf","sha1":"e0871dd8b203b75a416016226fa91f1ea45c7d81","sha256":"a7c316b1eda3e5524857f104a503552fcec11f11ee0568c905646b768769cf1c","sha512":"f02c6e7873ea9eb661ef42c34b15760d16cd4e29243fc07f07432e3bec5b1fe69077609dfbe5ad0b086417f0b66c4d4fe7be34e560871ca71685e0827ba1652b","ssdeep":"","tlshash":"18e0abb8a38c481dc2cec3f072386086173f301070a60465aaac99314edf204d302954","first_seen":"2024-08-20T10:57:04.181707Z","last_seen":"2026-05-15T19:37:38.816258Z","times_seen":12,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/aqua.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/aqua.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13821\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"3003f7066f10461df34c05e42eaecd0d50a079bebf8fbaeca9d019854652e075\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.275826,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":14931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ce5cc6dc9f780860e0ca1ff62c1c9937","sha1":"d88293b77c1869fa0005b3179b2d0bc094484f62","sha256":"20e945588f21888ae05d2cd5f3d44e192112248f7b2eea3c83dae13e1aa54700","sha512":"ec480458dd16c608c36b8f7f7fbd20715faa1ed814933ff71777e82a3f594932a1edb8c2ff1da3c6c2b7df9e21b2f2c9759658d26f66a4ef6df766923554bee8","ssdeep":"192:/p5AzFkBFs/cZN/doDCwm7rBtpwJE6hY/YVoiHJGxaokZHR0SA4xV/gvAB4Edrjm:/p+Rys/kqunBtav3n3HmoaABXHm1","tlshash":"d0628dd6df2b2999d9be3f274038314d3e2c2b9e73cd85482f46117d2549a82ea93f44","first_seen":"2025-06-22T21:08:42.408826Z","last_seen":"2026-07-10T17:06:27.255965Z","times_seen":40,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/usd-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /usd-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 392\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"ca7f4ae0cabd5340df69200d5c873e8289cd5986b3bc49e6f47a66234cb3d3cd-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.164016,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":853,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"48689d4a93bf676070df09e191630533","sha1":"9c1201154edf6e6419c25847bf7dfe2c5a29d025","sha256":"e206b27798b88805a99660ccaef4c55f5ba0cf6e40488f7415c658a933bf417c","sha512":"6f7245c7f92ce59640b57d2da42ce1e5636a07913d78bad4e7fc72a798d4c63ee6091a641afee18d7246142edf9896a73fa1f8ebc30bef4b51e60c63a1ce1d5a","ssdeep":"","tlshash":"aa01aff8c16084ccd867c7678a2a6d417f7f04fdfcb24462226e8f386987256b756d18","first_seen":"2024-08-20T10:57:04.160465Z","last_seen":"2026-05-15T19:37:38.817955Z","times_seen":15,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.lobstr.co/static/landing/images/charts@2x.png","fqdn":"static.lobstr.co","domain":"lobstr.co","tld":"co"},"ip":{"addr":"104.20.40.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lobstr.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 08:29:52 GMT","end":"Sat, 20 Jun 2026 09:29:39 GMT"},"fingerprint":{"sha1":"A9:B6:67:24:5B:28:CD:82:13:0A:DD:BE:D6:F1:9F:AC:4C:BA:A2:EA","sha256":"DA:92:B7:8E:5C:37:11:AE:42:04:CD:55:A0:52:67:E7:E8:F9:72:18:65:B8:22:D9:5B:71:50:0F:63:56:9E:6C"}}},"request":{"raw":"GET /static/landing/images/charts@2x.png HTTP/1.1\r\nHost: static.lobstr.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 May 2026 19:36:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 39579\r\nConnection: keep-alive\r\nCF-RAY: 9fc4983d9b99723c-OSL\r\nLast-Modified: Fri, 07 May 2021 10:41:40 GMT\r\netag: \"bcf6c9b3f27449893b2c314701c42486\"\r\nCache-Control: public, max-age=604800\r\nAccept-Ranges: bytes\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 f1cd76601f9045c7ca0ba2f73ae1bc06.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: BKK50-P4\r\nX-Amz-Cf-Id: ZTCBHGhPNK0Zdb_YoLhRvb2AyVIuWg4veph_1s_9MgabLa-xgOACuw==\r\nAge: 563305\r\ncf-cache-status: HIT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 768, 8-bit/color RGBA, non-interlaced","md5":"bcf6c9b3f27449893b2c314701c42486","sha1":"0f2a0ad912197cb064e8ff519b0b99c1fb2445a1","sha256":"7ff129a19503f4e1cfa81d4b76e16c703baa03f8779c50744b2506d0bbfeae8a","sha512":"0f31c7add98d78f38663c9ce2779d30d97347c01e8f124476e5fec593f379a2494520b6344f2e4627d2547b297ac7649fc454e71ab7344c6a2dfecd3442b69d3","ssdeep":"768:Ziw3uT1p7R3crpW+Fa+2qPdt9N4I5OuNuk7oZT3GKh73:sw3OT7NclTU+BxOe7cT3T","tlshash":"05035886cfa6643bb5258906b3a7b0c2d0256d377520ce1e0bd2a47f5e07bb6ec34c59","first_seen":"2023-10-27T09:06:37Z","last_seen":"2026-05-15T19:37:38.819001Z","times_seen":14,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":119,"dns":56,"connect":2,"send":0,"wait":31,"receive":18,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/ledger.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/ledger.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 882\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/webp\r\netag: \"edfb2e28ea7ff77fee0b90563d7d0162059966bf3b388864f2ddada9ecdec86a-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.260913,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"989271237b606d07fce138f83047a0af","sha1":"15ee491e7e2fe4d51aaeadd9e412a15b3484f15d","sha256":"602a5480c61321a23cde0672e80010aaa910af899bc08a01c22cd4b82d4b201b","sha512":"cd028f033f968f3101b6c1b616cc13732a079730108eba38e643c7181c3c91b5221e8cfdc6c6af5f6f84bfeb5d89f57e397f888b4cbfb1167a71a56b900217a6","ssdeep":"","tlshash":"8a1114429628d8dacf6c3b13bd1a02e14901086dd29c13eae3d455e45d687698fc54dc","first_seen":"2023-10-15T23:58:17Z","last_seen":"2026-05-15T19:37:38.820122Z","times_seen":32,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/blue.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/blue.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 69589\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"a7e8abdb61fbab24d210dcf3b703b3777b06d7392359e16514a97a476ee8d69c-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.317207,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":69801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"572c99835be05d1609aaf64bf0cb5cba","sha1":"7c6b180906a0a31d725c58ae10176b94de479e28","sha256":"ea0558369bbbac359dd7ddb22bbc42abb2c21bdd3617698c6b98ba3a4bc6bc29","sha512":"0566ced23bddb18bfb265752468a15315e23f52241e178864fa683592fa1c62ca05bfbbdb4e8e182abd6d11e631947041a899abea2797fbe4c902ab950900dac","ssdeep":"1536:SR43krBbc9RjA1FjNOnjv3a62JIFNuHYEcHHxDmQ33:SRJ882zapIn1hmE","tlshash":"636302818702dca5c53fddabd08700876dfe291ce45be51e34b62fc0ae4892026b439d","first_seen":"2025-05-29T11:08:17.834956Z","last_seen":"2026-07-10T17:06:27.262084Z","times_seen":53,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/livepeer.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/livepeer.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3232\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"00a5ff55dba200f9aed13a4b2292b32ee8f4c4f084dfbde0690e54299b2486d2\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.331825,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3232,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a3aeef4501e2b49a17efa1a6b003839","sha1":"b404d46a6ce2136a8822dd73dea11c67504c2bf8","sha256":"eaca6aefb08215d0957684d497b688f477e2ea9ffb13779aef70d8813bf20df4","sha512":"6e9188044a96dfa6047d6c55442ab1cac78cb3611bf9a1d697a1577c6ea64d991d3a0a45b4756b67110ba0546f75f245eb0701752ec8d11f2026a68a40fd8a8b","ssdeep":"","tlshash":"02616d7d79f40503f73770d5a2144e0e9c9a71d1c2363a9ebff349102eb51ae9720818","first_seen":"2024-10-17T17:48:03.92857Z","last_seen":"2026-05-15T19:37:38.821673Z","times_seen":23,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/trading@2x-mob.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /trading@2x-mob.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 33658\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"1e476b6c6652268d46e154c1a35cb5fd8e406c19f6764559101f0b0ff95920bb-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.153484,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35012,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 492 x 316, 8-bit/color RGBA, non-interlaced","md5":"ab0fec33d472e4d8b72b7cda503bd793","sha1":"5e846d148148ef5293b4464003c9916411837b1f","sha256":"37097fb918ad8d1362bf14b47a8b9ef19cbba3c8b3642fe9e4950778886a2398","sha512":"805adecee11c09eaf4a77abfa6fe6420fdfb4c2d32ef77cbea25b4e0db8e09fbbf0b1b641dd0c1a47ef2f28d65432bb04b43ac469ab9038f9f1224b96c000bba","ssdeep":"768:tIMupkFrfTT4ZlZf193SY/rtscpcSaba6a4zYXwuiJuH6+VV:yMESrfTTalnd+scE4S+EbVV","tlshash":"b8f2e148fb4eb1c4893b1278adfb1c256c50e54a82a862f4581b1c753f7162f72f536e","first_seen":"2023-10-27T09:06:38Z","last_seen":"2026-05-15T19:37:38.822516Z","times_seen":16,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/yen-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /yen-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 306\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"30471c3cdc0cd11a49676509330ab2134eff68f73076b462395cb30904a1d0a2-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.170218,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":557,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9301988512204131de35eb2024d8bb3","sha1":"edf474691c7544402c7ebc8dac70a58617d43017","sha256":"1e667fcaeaadac4b792adc8436e464bf0c95d064cb675c2f3924e114216c38b0","sha512":"4f545f893ba50e314a4b922e388f524c9007d2c4a8590ff9bfb802d840552af8c7a8684bd2eb4f1ce1a808f5f05c730834e3c656f8fb467fc7a2e255fc152cf7","ssdeep":"","tlshash":"6ef046d2c9ac636d81deb7b49f68fd202113217a51e30a5672d8ffe11383116d600d55","first_seen":"2024-08-20T10:57:04.193169Z","last_seen":"2026-05-15T19:37:38.823431Z","times_seen":15,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/connect_main.html","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /connect_main.html HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3850\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\netag: \"7563bffe42c8376ab30a93e535563aab6f5dc8fcad5d422293fba62ad05f69d5-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873820.119076,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42271,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ed8006e81ff9119ad8a2526586c5a524","sha1":"236d6d1ba00efda9c3b9bbc0b34b1f7f01c53438","sha256":"b6df8e83d693404eb25c0c2688bf161f2e2d354eaca73ba54287fb1cc20fbd3b","sha512":"93c051df9c572adaae70dca13093529bb49f754c707d6cca3a893ae2a701d89d2619a73997a89b38abff9ee7b37438f95dd6d77a7297f89309ac8134681a6232","ssdeep":"384:WP8ML/J+JDI0WtIqslnRGNRgIUI6y8KGSrthJsgU:G8pLjRj4bU","tlshash":"a813425051e6147b90f341ca69b3eff5aa90b343c31645643afd2f093f8ee698ca7294","first_seen":"2026-05-14T18:53:46.088477Z","last_seen":"2026-05-15T19:37:38.824869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/sparrow.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/sparrow.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 532069\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"eca1c298505a2d1ce56109b43bfc696b5f4e6f4af00da38a480a7354f7262fb4-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.262681,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":554805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1650 x 1650, 8-bit/color RGBA, non-interlaced","md5":"5813c2e5e12971f9e39521ae368f408c","sha1":"7bc93b789fc950949e46ea437db52a7d6ca3a9fe","sha256":"4a7508a15b31ed92beeb35549fdd31f54a10bb4650d95d60d499401ea2a882ca","sha512":"8ed633ba26a231a0f8c4a1a09238f4888a4f7f948b261fe5e3cb80d5feef659d1a1aafb8aedc4602057f0b622624bb8fadecb27848387cbd9db7813f3682e34c","ssdeep":"12288:jH55u5SkK85niKIi9W/ut/PpcoX+na4yzWVJv1OiuE:r5g5Sk+ut6oXeyaV+FE","tlshash":"41c40203ca90743f59438b2c2ad34645e93924ab712e8b366f87146b694b7f7fc2670d","first_seen":"2023-05-09T07:16:22Z","last_seen":"2026-07-10T17:06:27.236706Z","times_seen":69,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/saitachain.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/saitachain.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3687\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"545700dd88a29f602e8e76c4bfbedda5b7ac3e8bb34cd1840aacff9512eb794b-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.363444,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 53 x 54, 8-bit/color RGBA, non-interlaced","md5":"560219403f509de6c245be37656b0f50","sha1":"73d8ccc016fecdad6b24b65bdef145ccbf34db3d","sha256":"5a3ba310b17cef69e4c55fa857ccf2e031eb3bac43e2523c7f06008a998f7ca7","sha512":"2ddaa212ec09c646ea265fcc830e7d6f9cffac3658c4959ebf394764e6c16ec4482eb5e8679c358f4a489605708351301554354856ca8e2bb411db2684484fbb","ssdeep":"","tlshash":"d2718e6216002664f9e3a1e89c1bbf1484b10eda1446e5936e4f7f49832b9bec00a559","first_seen":"2024-09-19T20:57:03.461719Z","last_seen":"2026-06-10T21:10:24.811223Z","times_seen":47,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/magnific-popup.min.css","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /magnific-popup.min.css HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1285\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"5e79e4cac31e63afc99a76d477895b1ae6855ad2edbd981387ad724024bef5c2-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.133442,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5259,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5259), with no line terminators","md5":"64912a79884a20761ab19de42f85218c","sha1":"8d29cea8f84afdcaa69c0594e37263f7374dc8a6","sha256":"3d92e113ac3031b838001ddddf965d045f470ff748ff2e116b30378910eeaecb","sha512":"f84a0fc3e162c21e9e49e44aef3c08286d8c03c8b7ad5fc319aded76db501a05b26ad1bf4a49dc4f9dca1d0692e4987d30d393ddd9852f41634d8d3c02777f0b","ssdeep":"96:VuKSCO7EWP9UrJjIjZQX8ZO9d5Zkxudls5/Dm5Mk9nCWh3:VSCO7EWP9UrpIjZQMZO9d5pd+qMk9CWB","tlshash":"43b175f3a941313ac633da16d5c39f9c3227a227f663569fcf82a419c6ce89c0525384","first_seen":"2023-04-05T08:30:27Z","last_seen":"2026-08-08T12:57:02.777637Z","times_seen":5186,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/app-store-logo.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /app-store-logo.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5562\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"c1d0ccde21ed1c7da88a5e2e26c2cb484a50501179e5f8d0a33b937b6aecdffb-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.139211,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16362,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1efc235eb123d5f6dbed5b426751a2ff","sha1":"fb6c2a19db71a37b60c5e859800023e286482291","sha256":"a42ad4eb619a219c7ac7ca8559a19d3443bf8bcf119cbd7ee5e579fbfe235fca","sha512":"96edc94297cfe8b62ca8eff69e77636f1cda33fd039d50cfc2d0d2d1641868f300bfce2da8d768290e4c21d5e996b63e249cd5c69c3ad463c7ca22e11a4487a3","ssdeep":"384:d+EdXnwYBl/EzITMRo26UiPPB7IQE1YbM9W1csXC:dRr/TMR52pEQdbM9OC","tlshash":"6772a3de97e8b2e0f401f3f0c91a54763b5f38fb6b128aa8cb991e95a65105ccd598c0","first_seen":"2025-05-05T16:39:57.199493Z","last_seen":"2026-07-27T12:29:39.567606Z","times_seen":12,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/lightcoin-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /lightcoin-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 284\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"513ae62088e50a8c0729c42372cf227ea0a374cecc38e45853d3123bcd125363-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.168673,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":445,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7128af992e158e7e43d37505b1ec539","sha1":"52872de79f4284cc8a4a8bbd5357ad7f4d93961a","sha256":"3046f8cb2480b7b6f9bf482f26097316df0dc168cdac6b314098aab3743f02ef","sha512":"a81207ea4a1a50240be19fcfcf0e8aaa3087e3d0677cd28b744ba202ddef5188fc4167da4b69805449977788618065a9397811fe9254cf42a7617def35570720","ssdeep":"","tlshash":"81f02bb4e1f9580ca9d049e45f38ed471db970e446cac988aac1a4ac30be8a2dc65a34","first_seen":"2024-08-20T10:57:04.180917Z","last_seen":"2026-05-15T19:37:38.829044Z","times_seen":15,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.lobstr.co/static/landing/images/trading@2x.png","fqdn":"static.lobstr.co","domain":"lobstr.co","tld":"co"},"ip":{"addr":"104.20.40.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lobstr.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 08:29:52 GMT","end":"Sat, 20 Jun 2026 09:29:39 GMT"},"fingerprint":{"sha1":"A9:B6:67:24:5B:28:CD:82:13:0A:DD:BE:D6:F1:9F:AC:4C:BA:A2:EA","sha256":"DA:92:B7:8E:5C:37:11:AE:42:04:CD:55:A0:52:67:E7:E8:F9:72:18:65:B8:22:D9:5B:71:50:0F:63:56:9E:6C"}}},"request":{"raw":"GET /static/landing/images/trading@2x.png HTTP/1.1\r\nHost: static.lobstr.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 May 2026 19:37:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 56132\r\nConnection: keep-alive\r\nCF-RAY: 9fc4983dbf3656bd-OSL\r\nLast-Modified: Fri, 07 May 2021 10:41:40 GMT\r\netag: \"989a327b45be1898173a3f70285e8000\"\r\nCache-Control: public, max-age=604800\r\nAccept-Ranges: bytes\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 e8157d8a068ac3c2cc33e195eec6176e.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: BOM78-P7\r\nX-Amz-Cf-Id: 77OYMqR-4oPXtf1UDB6xZoXr_kVLe3egV2o8zYF_6cCYXKEdSSHPpw==\r\ncf-cache-status: HIT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 768, 8-bit/color RGBA, non-interlaced","md5":"989a327b45be1898173a3f70285e8000","sha1":"5435eaffe81743c41f6cb55d26e39c16e051c3b1","sha256":"5102f136355c0d42f81b2da0b0457675730f37021e4dac2354fec3e569adde13","sha512":"df445fcc1bd499280d31fa4cc1e0916829a949a1448758269bfb4c99a81b97df53ecc69d417d9ce26ea200f4c14775530e6bb6064291fd3ccb1138aa6bb296b7","ssdeep":"1536:IPrrpeE2mz3bhIWobOQn0J6eeQ2Q7RqxzlIg:IP/gk3GzbOQn0kevEIg","tlshash":"0d4315b7e1324567e3a96f6502234fd880793cdfa9bf740486c5be62672f2ee311441a","first_seen":"2023-10-27T09:06:37Z","last_seen":"2026-05-15T19:37:38.829908Z","times_seen":14,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":138,"dns":58,"connect":2,"send":0,"wait":314,"receive":4,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoC1CzjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/ubuntu/v20/4iCv6KVjbNBYlgoC1CzjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lobstrsupport.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38752\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 09 May 2026 18:20:03 GMT\r\nexpires: Sun, 09 May 2027 18:20:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 523016\r\nlast-modified: Wed, 27 Apr 2022 17:04:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38752, version 1.0","md5":"d451decbad0d0d2feba27610481a34d8","sha1":"1479b2ad870d5e2bb04d206f33460089394f6eb5","sha256":"a5515c53111bb4a4f45aff63d06df893ae9033dc85e82cc2ef27fc099a4d7609","sha512":"687567d725ae5384bf73b0f1525692e3bb148550550a75af48e23f1fbfcae7b235e996afcf4c9354ba10ee365927f450f7dc0e6ea7de164873e1360412dcbf73","ssdeep":"768:C/Kw+JYVxXzNNZ69aqWa5cMF/7LWQuKLgwfSFQqC8KKX3rw/B6rNL:TwZXRK9PWa5cMF//ruKLgwfSFQ+KKX35","tlshash":"e303e1ddd0168ef216958ffacc26a0c3a7729051651c98173fefc90ae5c9821ce694fb","first_seen":"2023-04-08T12:25:35Z","last_seen":"2026-08-07T12:38:02.773332Z","times_seen":2479,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":30,"receive":4,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 15:44:44 GMT","end":"Thu, 09 Jul 2026 16:44:25 GMT"},"fingerprint":{"sha1":"91:AA:1B:52:A1:7A:87:32:DD:2A:E8:CC:00:8C:7E:64:A5:F0:D4:BE","sha256":"79:52:5A:75:DF:81:FB:8D:B2:01:A9:7C:CB:0C:89:E5:E4:5E:E6:49:F2:21:FD:7B:67:23:67:DB:CC:30:4C:4F"}}},"request":{"raw":"GET /javascripts/insert.js HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Mar 2026 07:04:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mG2AUmi%2BCDRQaz9gESNDZ1pq62658dOO8wfsocHymHnyN636TNW8tHT329LSYMfJWWT7neRkEfUiZxnJ%2Bg1gs32vanSwih06JiaTVGoKbVf5LxLsGmeRfdgthcLhpuHYTQ%3D%3D\"}]}\r\nage: 2645571\r\ncf-cache-status: HIT\r\netag: W/\"69c62c03-3e6\"\r\ncontent-encoding: br\r\ncf-ray: 9fc498401c838deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":998,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (998), with no line terminators","md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-08-09T03:17:34.396256Z","times_seen":1857,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":73,"dns":24,"connect":7,"send":0,"wait":9,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/argent.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/argent.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2892\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/webp\r\netag: \"fa76f4f002c45cec0d0775d0e5ef3937ad84fc4297cfd623b671f7121df32677-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.356479,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":2948,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4063f5e5218eff3dddc88c7e5d600e0f","sha1":"d042b40b08e3acc54fcf39f2c5c8d85865a0c1e4","sha256":"cbcd7127280d8b42cc4a145828f635f38eb00cffe8562ddd443ed9c3539f61bb","sha512":"f6482e95e0fdff4df16ea53bad610427a1ec842b53be05de08a6eaeddfbb065a29838d96ae9a32af47082c0b65b24e78ae829f1cd7cd7a6792e1036a41648504","ssdeep":"","tlshash":"bd516dc6290f3619d37c22e743381b8a42ab94e14777d82c78d583572add48818af6bd","first_seen":"2023-08-08T08:44:17Z","last_seen":"2026-05-15T19:37:38.832479Z","times_seen":65,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/ternio-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /ternio-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 437\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"4e34a21b591e948a3927c3a88cac90c4547b1ee6d5b7d1bb4c5c01a102d29164-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.163983,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":773,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18572b4db6a577d4d8739fbf1337e3d1","sha1":"125d562115a8b60c054654fb6e9de96ab37e0068","sha256":"dec70ae7cddc8bade519733df8bd6ab6eda7f2f989b039a80b854db61b41e7b2","sha512":"7869ff182f9b8cc1e69da68c7fb293689d63bc2abdd4d496ca685b5227a8c9c39cee85cc2a8f165f2fa83596408f43b2f53b6babe5c5a2c6e42b1268872cb034","ssdeep":"","tlshash":"9f01bad86b3454d59517da72ee3fb9cd6175d0fa02814de68340ac4076856d0b514f7c","first_seen":"2024-08-20T10:57:04.159728Z","last_seen":"2026-05-15T19:37:38.833699Z","times_seen":15,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/medium.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /medium.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 302\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"cc74c98948b544285a5d79ad3061e7629bcac90fa5fb7d41c0f114cd406d3794-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873819.171676,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f158ff1e7f4e6567af8493f420b315d","sha1":"cdb4dba521dc70ac7590b360975d04eacbcb3ab9","sha256":"bc5d53bf47f54698b75176c76aeb40c0acfa9ba7505e0390f83a7b5948c2dd5b","sha512":"25d20da7bec8dfa0ceebf1d84ceb02bfab79d242d3916c86c1d4191fef22889bb72bf9473fcb0f4bf4e8cd789280af547df00d65fe1a15dfdb4113281d44ab10","ssdeep":"","tlshash":"e5f00efaa7dc620ca00b8ea97f25d8c4139da09395aaa0c8d30d1cbcd907541f102de4","first_seen":"2024-08-20T10:57:04.196422Z","last_seen":"2026-05-15T19:37:38.834731Z","times_seen":15,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lobstrsupport.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30480\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:46:55 GMT\r\nexpires: Wed, 12 May 2027 13:46:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 280204\r\nlast-modified: Wed, 27 Apr 2022 16:04:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30480, version 1.0","md5":"0e7e5f9d3a8ef121149827180b790b5c","sha1":"0e9f9333078e5df9245630ff6f68ba1d9da3c403","sha256":"e8e147e15907f25cad69b2bcf060213efad4ed04e0d36374715cbca17b2afc1c","sha512":"e6fb4856d43ac4d2dda6b7fefc89fe5e8d446bbb3fe187cfe1f49c8e24cc5a76bab505d5b6e7e70b84caa67d0052f02b136a9e99b5637ae19873d382e0432a16","ssdeep":"768:YE3aTX6k4q5zBwxMiWJPq8+qYmAWE+5hbhPUI3I:YE3AiqZBwoy1qYTURpUI4","tlshash":"e2d2e1e716c4d3baded7187926d493c8c8b4c62e037047992ae759ce784b2178b18ec8","first_seen":"2023-04-05T14:50:14Z","last_seen":"2026-08-08T23:28:25.100729Z","times_seen":10142,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":9,"receive":2,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/unisat.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/unisat.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 17433\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"a81010bce8400f323e582d4eadee285284c6e0ac98301d059711ba1437468a1e-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.317003,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":17880,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGB, non-interlaced","md5":"b11de916288d4704995c89fad058bf92","sha1":"165e00783d285234989f3aaadb581df0b8a430b1","sha256":"6e7aadecd0236af8372dbb71b7bd7f28bcabe34eece68a35583669cf4a9a46c9","sha512":"7f63a314defeb34a039c261d9da82ccdbc250da8b7da41c50b164b1cbacc097bd2f9b0eeda58022c1c146c6937c0c3922eb9567bb7d6dc64fab34637957bee3e","ssdeep":"384:rXpjBxgSK+QdTDcW0KDYob22yZxJ/tu3LGbsy9tl:rpzgSKzSK8zbjkItl","tlshash":"0f82cfb6d87b04b66d238dffab9235c80b5b8cb0bb71ae916704d35d547020a8c67831","first_seen":"2024-04-10T17:36:54Z","last_seen":"2026-07-10T17:06:27.225297Z","times_seen":46,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/bifrost.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/bifrost.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 190525\r\ncache-control: max-age=3600\r\ncontent-type: image/png\r\netag: \"6ed1c38ead4be4a4035aef34a2efda79aaae13eccd8fd836d7d022df2ee4d898\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.363448,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":190525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e4c2485766554fd4f080d7dcc746b60c","sha1":"0962fc455e87ad8c1cdb66efbb4372bc144544a0","sha256":"a674b9bcdb13aec4419d24445f75d76c51f32ee729332cc223b22238ecfe80e7","sha512":"7573b1b93df6e9460da6efd6fdc67480de61717826de0ffcad838a4f1c269c2fa54bc19464037f3a5292040d21b7e075b77a9577ed8475ba311a25770339a20f","ssdeep":"3072:uCeaeNivb8tniSq3aGZ8ajyuZsTJRuCTw/zu/OVySjVvN7iIa7QNmek:N2Niz8ZiSqqGZ8syTVRuFz3NtNxaek","tlshash":"7e1422e6b8c911f70d04e208138d64ba3923fdcc505a271f629a99eb43df98b98790d9","first_seen":"2023-11-06T22:45:17Z","last_seen":"2026-07-21T05:16:19.588987Z","times_seen":246,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/logo-mobile.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/logo-mobile.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1906\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"2568c75922542f1a477685078ec268d3f61368614976e2e099cd0cf1f75244bf-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.376157,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1966,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 138 x 138, 8-bit colormap, non-interlaced","md5":"a1472bce10d5ca15be38732b6abdd9e2","sha1":"826099c10dd6b2ae972324e0d112c14c37aa5707","sha256":"d92af161fc3aa69877b787a570b7cd7752c62d3cc3775141eecee962ae14c89b","sha512":"0f2942e74b6bc3df056d486decbac9c184b95ed30372f2bc9b9aa652fa0cebb15fe7b30dcd3ee6fbcbbd52d37a007534f0d6baf3d33f81196ad4742015fe6a6f","ssdeep":"","tlshash":"b8411bc4912e0ee91d037cb268825a66f0b28d200b754a95e307b9de7170a5f5831a8f","first_seen":"2024-09-19T20:57:03.516268Z","last_seen":"2026-06-10T18:40:19.349621Z","times_seen":46,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/loopring.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/loopring.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13578\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"8db14143d9299afa99bd81fc3dfea84476e13c50efef70b37c02ec552f2edc85\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.377082,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":13578,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"33838e1170ea4be184d57bb0287eb350","sha1":"826733ae16a40a7b999ae7b9d8cf362e079caab1","sha256":"6521d5cc47ace6815cb5aaa4bd52bc73ccf0c2b68b48e9a82106c998449cb3e1","sha512":"0508317bab904f12fa09b751f50f822c2b6dc083a9dd185eb490dfe7358cd4777d66b5769eea5ae65bff70b74b1cc87c747f08fb43b1f078ecf259eca6b44a30","ssdeep":"384:thSiFg7k9Wk0sD0Kf5zYL1rDPJ7zlVjDh9lrt:tACjGsjxYptlVvxB","tlshash":"1952c0584ed8ba3ded64fcd608b8e3175f91690e814c07e7ef074ab0136798d920667d","first_seen":"2023-09-23T00:25:31Z","last_seen":"2026-07-14T20:14:06.750965Z","times_seen":181,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/buylumens@2x.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /buylumens@2x.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14741\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"20ac848e2542e01125f22447a62721a7e4a723ce2d765a0fceb93775c92b24a7-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 4\r\nx-timer: S1778873819.156750,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":18448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 668 x 486, 8-bit/color RGBA, non-interlaced","md5":"0a5fa8c4430e0b5734681cf7b1733b35","sha1":"ea798e06f000edda1eaf1c077aa2b67e0885ff50","sha256":"055d147b66b95f8b8a2df17fd4c4cb58faf8b6fc5d65ec31c6ff1f85cdbe6c23","sha512":"e8cbc5eb2f70177509cfc3de2b3fb12e57998fa3fa501e4075a0e2ea558851eb6642be16540a629c23a0f5ff7f021a914c48df9bf92e2d1906112e22212cdc62","ssdeep":"384:1dVAzPFh03bDrQu3ilaVrt3isI6u+gVVVVVVVVV9oFKB:1YTYcuylsqrB","tlshash":"fa824919d71a8977f140005af467882b2226adb33180ed4a22efb1bf5b43ff55d39d86","first_seen":"2024-08-20T10:57:04.188288Z","last_seen":"2026-05-15T19:37:38.847196Z","times_seen":15,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/euro-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /euro-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 800\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"53c3b142e585cc1fe010587868d927e62883867a7c26b964db5c4cf626c6c693-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.163308,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":2073,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"88ea961df5d5000425c29352c1c517a4","sha1":"02c22a665cc326c8c4c25411c9075c4e342808db","sha256":"6fb58eece108829c62b20bcf9d45453fbdf5487cdf48accab903407d8c058e78","sha512":"981f7d6db2711d55abd50d14f866911406d52051678e57e484e3a121c81dca4c67ea64079c01dbaf137de583383271cf9ac392ee4a73b86d14425e79efda8449","ssdeep":"","tlshash":"d141ebcbb2c0d74dddc8c09e8791c49cc05a21aecaf7e59285eee30c196f495fb58180","first_seen":"2024-08-20T10:57:04.158917Z","last_seen":"2026-05-15T19:37:38.848921Z","times_seen":15,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/github.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /github.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 750\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"5629ae3c48f796f2b281fce197dadf0b00cb737e3dfa5ef867e9cf210aaf2cbd-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.171754,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1615,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14c8f8f2a88515aa6b60f295a87cda11","sha1":"8ac3dc8c76d4ae6d4df85157931e5d3de1132817","sha256":"979a92e295ca4b55dca4da0342c962ba0af151ae641f2646ee73994eb11390b6","sha512":"f2d3c99da8ef6a765b4eb9eaa92fe3bf80261b929c0db66869c63d65512b618c3db3b618d3c80ccba879b4d691de2666ed96a21ffbb26e5c38b2c7fd3bbaa3af","ssdeep":"","tlshash":"cb3110f11e58578ca8cbda6c9b32c0a4930e74bdb49259c39b4f7a24640acd0f943414","first_seen":"2024-08-20T10:57:04.195608Z","last_seen":"2026-05-15T19:37:38.850311Z","times_seen":15,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/chart@2x-mob.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /chart@2x-mob.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 17788\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"3aee71863d5de36f1c9ea6d7a7cf032ac25ff0a4807ad7ff13c9a3e0011bd595\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.156794,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":18613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 396 x 268, 8-bit/color RGBA, non-interlaced","md5":"65809a5539a188e033a21fec17a0b424","sha1":"56a3d67de08339803685e10645acc145f51baf17","sha256":"a140eea286de054ded19ba07a86f33fea70c058b163eeeb9196f7de1118c6892","sha512":"e56834ac07bf682bea26c67a6ff3f934492ee7f3b25ed91cb2b447066ba7076350444e9a24092111af14667676efeff2059927e9cc072a31ccb46204007712b9","ssdeep":"384:VK10a+2lGjySx1caWzqFQ49EnfK9dv6J/FxVLXaYo:g10a/lGjySxNWzqF75P6Vds","tlshash":"d482df669c50bc3f5b962e2e41749cd67dabe724000204b2de49f0edb21f74e3a87c50","first_seen":"2024-08-20T10:57:04.186133Z","last_seen":"2026-05-15T19:37:38.851498Z","times_seen":15,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/kasware.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/kasware.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13975\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"accc5aac1efa65b6bdb65db731f5703206c3a677d7725a31d4fc31a1d22cd672\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.289805,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 549 x 550, 8-bit/color RGBA, non-interlaced","md5":"051a9dc6adde7a39688e11244462aba9","sha1":"6bfc5ce65c6420702198a927faeab7fb8f2b7159","sha256":"27b6396304164d18a9b0e752fef9ba9b94b49e8427715afb8de73ebe30c48527","sha512":"4409c18661da986fc021e245c68aabf6fe9e6fddda7434fd40868822ec7b15870e059f292bc1369eeae96460ce42d875f891c2881cba4cb5533c3d5954bb95c6","ssdeep":"384:hNnuJn5h0vJa1bNs678osndNO1Ye2V3UvMaEFWBySSCm:fw7bNsu8os2EEvMalBy6m","tlshash":"ee62bfb789609c4b124398505cc5e73a17fa98e02250f85ae9deed93d940cfed9448fb","first_seen":"2024-09-20T20:03:52.313875Z","last_seen":"2026-08-03T03:06:07.355132Z","times_seen":63,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/okx.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/okx.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1033\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/webp\r\netag: \"36fe861425dbe59ce2867e1a280cdd5f4271d1b0be785d9c1fdf75124c0ef406-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873820.358083,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4e251ace881bece31d659f1e5f77969d","sha1":"d8d479a641b03facf0ffd6f4567b397cd54f3788","sha256":"98fc4277a74fefc7c3147768787415891b29c16f2f11b8913de58e85a8ca1d77","sha512":"794e030ba9bf50c6016b1e1727cb50f4a69367deee272e8c8bc5d8f6a78c099657fdd3746ba8c05987d1cbc47cb282bc8b6f84dace472fb98a5d9f24c359f262","ssdeep":"","tlshash":"2b11755a7160f30541fc98b5cd9223b07936dcccbc1280a17db50569467d36d39342b3","first_seen":"2023-09-09T06:06:41Z","last_seen":"2026-05-15T19:37:38.853281Z","times_seen":252,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/token.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/token.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2781\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/webp\r\netag: \"c0d8cd2254f57c7a910df5b69703f975ab8bed700ca7c59d96602ea0d7f52abe-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873820.360395,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":2888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"219d8b09e3a2e5e11ed3eb284d2a9973","sha1":"c6aaa8b80981e943f1b81048c8c3365bc56982d1","sha256":"d43af5549e22c8745a8835d2ffd78a5bd0e61551262d7fae0a8a7963d9ffc87d","sha512":"84e496203e07ea199175f8026fc95e019d94067094b79d8f6f7b1301e40ef088c85d7bf68f7e53bf0e5fad26609957f7693f1798dd5901f6f70e51c95bd6fb3a","ssdeep":"","tlshash":"515129438a090190fc7be520009f23a5263a0d2f9f7027dcf3f465e639019d5bf05987","first_seen":"2023-08-08T08:44:17Z","last_seen":"2026-05-15T19:37:38.854168Z","times_seen":73,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/pera.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/pera.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10778\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"26aa7d55ad8ea5d5b3285775d86a382a4c8e7f4156159522296dd095c5379a2e\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.382210,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10929,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 447, 8-bit/color RGBA, non-interlaced","md5":"addff234e65ae63e73ff7c0b2b250949","sha1":"c3b858e9b0fac1c258a918d0ab5e5864c100a057","sha256":"7350a7a36da7a5c464ff9c11cba0278e35dce3d79ec7bf22495478469854784d","sha512":"eaaa4694a2cb7eab33d3de2d830bdde1d0a41418b414991fd879e573f60948a86d43a3c0a951dbc4bbc688699aa1f41f83f3854cb9efb1ae74756af177f3f4e0","ssdeep":"192:DSBkGuUu9KxANtWItXyN3v/vGiL+5bTr3pM/WXEgsWbP2BWYxhV+4jwwr:2BWWANtWIpyFv/v5LQpNXE+SBWYxhVb1","tlshash":"2332be199e766875f0b6447316708975d4ca668838bb3823013f599efd2fb4c0f821de","first_seen":"2024-09-19T20:57:03.531884Z","last_seen":"2026-06-10T18:40:19.338852Z","times_seen":47,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/accounts/6594b78d07cf651483036d8a-67c8c93f6674f7d1441b95292f681e8a06b93690ea783a9d0e3c809251e1712d","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:01.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 15:44:44 GMT","end":"Thu, 09 Jul 2026 16:44:25 GMT"},"fingerprint":{"sha1":"91:AA:1B:52:A1:7A:87:32:DD:2A:E8:CC:00:8C:7E:64:A5:F0:D4:BE","sha256":"79:52:5A:75:DF:81:FB:8D:B2:01:A9:7C:CB:0C:89:E5:E4:5E:E6:49:F2:21:FD:7B:67:23:67:DB:CC:30:4C:4F"}}},"request":{"raw":"GET /api/public/v1/accounts/6594b78d07cf651483036d8a-67c8c93f6674f7d1441b95292f681e8a06b93690ea783a9d0e3c809251e1712d HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lobstrsupport.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 19:37:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 25\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://lobstrsupport.web.app\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\ncache-control: public, max-age=31536000, immutable, no-store\r\nvary: Origin, accept-encoding\r\netag: W/\"19-bWlGy3EybXE0p2NUljzIeMlQaB0\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccept-ranges: bytes\r\nage: 192864\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1chlszbjhIHeo7%2Bt66vLsGBuUocVChqc5ExPw7RIeziKSMHv7qDdqmA7YDmlOicaXKFfUxei3I%2BFOjtVY29RQ2Kb8dadG%2BGOsxYDEM4F5FlLSSqYLMq%2Bq5GT4OloiqT11Q%3D%3D\"}]}\r\ncf-ray: 9fc49848fc8f8deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"09be0429ecfc4377f8385ab05e3c265a","sha1":"6d6946cb71326d7134a76354963cc878c950681d","sha256":"67c8c93f6674f7d1441b95292f681e8a06b93690ea783a9d0e3c809251e1712d","sha512":"7324304580489c03b8323d8efdc6fef63aafa9ef5fc1c34e70add434681d0751ec96412e284bebf2daa40a79819c5b9e6f4a1bc4e3f12d746cf618ddea7b2827","ssdeep":"","tlshash":"d17000c03820088c20a08a00a2000b820a20220822a8203e800a0830a2830882a08a08","first_seen":"2025-08-04T07:40:33.392871Z","last_seen":"2026-07-16T00:18:26.595946Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/map.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /map.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13211\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"072f374a45e11ebd1d29fe2ffc48e47a709aa503374e59e36f375ac25522fbbd-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.153512,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":165210,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44da8f012b3b54fa0564df924c801fba","sha1":"0ded9f3e043f62fb81bb8e78885329464d339ed4","sha256":"db680b27df8a5ff7842e9d25d24b1fcfe60cfd1e45cbe8fb7703fca814107837","sha512":"dea5c17ca21f599c88dbb8384775cba2e297d6c489da22b28f93e6d1993eb3fdd10385e017a527d9a92f7c685a8ed3ca1dcc1c7ea70d54274a5265be630db0a9","ssdeep":"768:pDCymkfgjTbDYLQZK/47DKiHP8Q8cMYIflUlc3e8Xoocg8ksDcIZw+W27FwGto10:p2DYLQM/47uiHP8Q8rYIflUlc3e8gg7O","tlshash":"7cf339882b3016dd5f87f4ceef0b76e46a1af058a3fa51d8b29b899c705bc947914c70","first_seen":"2024-08-20T10:57:04.180155Z","last_seen":"2026-05-15T19:37:38.856872Z","times_seen":15,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/p-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /p-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 297\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"ee18fbfb4e1eb4d6c6d69d614a395af7251513d15b4bd059e3de775b48386027-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873819.170159,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":483,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e21cdbcd8c7f5bfdfb21a4113d079fec","sha1":"c7c8d9640f8b1595af84c79fa79bbf37c83fd9e0","sha256":"385207ae255ed8aefaa007349a253de739f1553341f54bcd6b13ac8c8d34a689","sha512":"5c2c83fa9062df47faeb6ef419ba901a0eb8610828571bf512723577e61ba21498c4e4b85585712fdd39fa9d53057cf65edc256044f10edb0260142278a72139","ssdeep":"","tlshash":"0ef0d4e52dec90cddd14847b146d7779d48564f1edd762c3c0ad67105ab60cfd6c1844","first_seen":"2024-08-20T10:57:04.19096Z","last_seen":"2026-05-15T19:37:38.857775Z","times_seen":15,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/phantom.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/phantom.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 472\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"b417661976f33fe78049810b7f123b82f42c6176f34be5854c5fa23a3f1a7b87-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.318848,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1108,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79b0d0cf3e74dcfb1447050c6eb7204d","sha1":"698e2ef14957d3ee9bb847b31a4d8db58cc7ecbe","sha256":"f0a1e2263ef6cdf30ab88d2f53e6d4e16a40e66fc3f4d28755d6bc11bb19ec81","sha512":"f5f7fc4cfbc6b2f48ee942a1fa480dfa55ba6064676a2b1eb926acf7142e705abd683dab90e491d4f191bb58c4ba3518f180c37426133c470644d5903abce60b","ssdeep":"","tlshash":"5c11aad53747d374c447eafd0a262dd06c1754f66725a47fc2813c0aa8560a53ca48fe","first_seen":"2024-09-19T20:57:03.475064Z","last_seen":"2026-06-10T18:40:19.436536Z","times_seen":73,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/rainbow.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/rainbow.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8629\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/webp\r\netag: \"26d33a84162f2037b83a0e00dfface91090e1298d51ca840f7769d9fbe4dc4ba-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.329483,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":8788,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"94a72f59df8d95ba114901f53b55b402","sha1":"ec0e2a0f86edd6fab39e5a3d00a75329702c2d53","sha256":"488d577bbfda6c3d4a90a696f97375a906284626405c2488d8d839c0bf90407d","sha512":"bbd65f381021a7d97a13fc1f0c294b16961f1168f0f8b979130c20feeedd755f270354bec668143c560e1595225b32bcd065e19ace85dc8f2ec1cbc671c6b81d","ssdeep":"192:OfU5CWlAKPC8j8yenQLke50plK7RK5eUNer0uDTr3pR8BintIi2:OfwXAKa8jcnuL50AREH0QM5RDtg","tlshash":"7402a06a524d13c3f350ce7fb698e00293d786102b5232b90ed56623db98af19741b16","first_seen":"2023-05-11T09:51:55Z","last_seen":"2026-06-17T12:57:15.478373Z","times_seen":280,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/spot.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/spot.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7192\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"79e6efb67ac13500ec9beca20fc5a6ba763fe12721db020c8a8ccc30d006645c\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.356067,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e0e52155391869b60b9ce0fac64eda3","sha1":"01d17e4e21455704e4495c5efe9a0a42e7fc1ca0","sha256":"35ab37eee4bf810514b329db142a133641120dedb171eb945b352e70a8d3092c","sha512":"cfe90783647ff018b899cc877d288327ec178d9f2e504b20d78569e8e9d07d7ae959d76216bc5690bec7b1aabc1d67de64ecf3b1adfe69df358116494b60c923","ssdeep":"192:mAfrUWmwmP7339G+ait1+hj3hgWz2+ZcNc3AcY0MNm1C+k6abcr7+:1TUWmwmj339G+ai3+hj3hgU2LgAc9MNd","tlshash":"aae19e64e8dcee4313707a1e5f447d28a607d3f32622ba306ff2914862b05f525bf995","first_seen":"2023-08-08T08:44:17Z","last_seen":"2026-05-15T19:37:38.860492Z","times_seen":50,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/coin98.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/coin98.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1025\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"f25e6d070fc8e4b224c64dd47a68635102d9998a0668e6a6f2e326c7a6b64cf9-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.376157,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":2684,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"52fd4041756cbfd3fb0f0649d1824e09","sha1":"653cbf456fe34ae78642f35a368f0a0e08585126","sha256":"36ec90aea0702d8abd3d4fc72b3d189c44fe1fa3cf6cb3c617f6f4522f92540f","sha512":"232177421707335940a62ebd429ec4d2297441cb5770f786bb65990abdb4c9de8056147d40c2b787b2c48fc0ce320c4dc4d6d9de86b42675d857fa8b33111d17","ssdeep":"","tlshash":"d15189fdaeec65dc74479fba9f11912a231fb4fa3a8509614d1e8e7425831acc90bc40","first_seen":"2024-09-19T20:57:03.51167Z","last_seen":"2026-06-10T18:40:19.438436Z","times_seen":44,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/css/add.css","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/css/add.css HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1082\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"6fa4f6b79603ccd16b434d20566e8b05accc1fe9770da487750ecd2fe6fd43d7-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.125383,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":4673,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"26d5d719730e420fcdfc8ace4b6ecfe8","sha1":"f3d7065e62b26a577113db999ff31b35559bb392","sha256":"743e4cd4a5444705974883376f6fdf2370a57dda99f4b5e40a43e7d465ecca1d","sha512":"8f589786ca76b1894dc899110970583c90653fbf173c7ce026b24de0b62b8a9ce2aa000937a37e780e78bb1c27ac0e04de848a8f6b3c343e19696afc6cf437dd","ssdeep":"96:A6IVUu6Fm/oGi4IRD5JT6uBztNE2hIsaG65hztBmylyiU0P2f9ISGdcf4M45EY:1IVUu6Fm/oGi4IRtB6uBzU2huhtBmylh","tlshash":"2da1fd47aaa7104b7853d47c3bbb2b992235c043e70add693e9d6325cfc93882de1784","first_seen":"2025-09-03T16:13:58.248272Z","last_seen":"2026-05-15T19:37:38.862042Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/google-play-badge.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /google-play-badge.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5780\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"09d1dfd73b3543233dbc2c232a01efbdc6da7b50b679d36d1f0ea3597944fdbd-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.172950,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":22259,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"579706526cf049c6dc4387a94c9b6c5c","sha1":"7948be3a8303b62578a3fed8977821dd6f7b5c25","sha256":"12af9353b843958b0407c8572cfcf01318fc59f03c3660003747e2ab8f9deff0","sha512":"28caf98bb177fb4ee203adb59bd72a3afeb782ca6f4008a4109285e3c9f7c6b24992c25c1e249fa3c4ca9189d3e17f4e82ab8cb3c2d7e839d315dd861e4a10c9","ssdeep":"384:glUDtndUKXyw31x7nQJxBw9q0wFETzyEOf2ddKcZ8VLxDbCT8MD1DE/0J5OjVsLt:g2VdUKVnQJxixwFETzyEOfodKnKRVJ5b","tlshash":"9aa2b8e0a2ecc2b6d144a39cdd10d4216e0a28f7bfc6c294f36d6e9c5b5909d8d4add3","first_seen":"2025-05-05T16:39:57.232533Z","last_seen":"2026-05-15T19:37:38.863334Z","times_seen":10,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/smartbanner.min.css","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /smartbanner.min.css HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 901\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"cfb8346153e61476485a576043a1fe54a7802e3c577d7bba9f90ba84e87c58ee-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.128724,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3214,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (3061)","md5":"759e4482e0924795fcae79ed436f7db0","sha1":"36627093448d3d87f462cbe7feac2dbda655b3ca","sha256":"84b0553148cd62d8028489e7c15211d05a5401ea8d981efd5b57d5d9c5093115","sha512":"e846d95ae12e4cc0bfea25460081f287ac34febe7c41813791161f5130fffe8df4c599e7745c849753bc3606a3043da399633cb1e364f47865ef78de50e347e8","ssdeep":"","tlshash":"0061b5217dc52038b16be16fa8011e4f22dc6c47d8338a2b96f5e2a399bf15e50bd30d","first_seen":"2024-10-11T08:17:44.847992Z","last_seen":"2026-07-17T11:42:49.039993Z","times_seen":31,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-assets.dappradar.com/document/48321/firstledger-project-non_dapps-48321-logo-166x166_4fa35b15a6521c5b7a3eb19519cac073.png","fqdn":"dashboard-assets.dappradar.com","domain":"dappradar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.248Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /document/48321/firstledger-project-non_dapps-48321-logo-166x166_4fa35b15a6521c5b7a3eb19519cac073.png HTTP/1.1\r\nHost: dashboard-assets.dappradar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/avalanche.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/avalanche.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 41904\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"7f9f127051e97dbd41f1b961ad4f5e7f0dad7f62d442645b5411dbc992471ab6-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.328875,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":47819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1503 x 1504, 8-bit/color RGBA, non-interlaced","md5":"bcfbb16284d0fe74e311ef8e8ac5e22b","sha1":"af82ffac7807c7a1871c1f26591980e54c1402a2","sha256":"ca2d5f17dcdbd41bdf1eab39ab129864d4ca1da0491b577556a644bcba04312e","sha512":"07cc427d55d827d55756a58aaf65d0648063e8922ec60dbeb630ba6d61ca41d7d099ee368fa6c5f91b52774d0e0490055805b9a44865a0ff81075eb345b05c02","ssdeep":"768:BOe6Tb9TW531NpPPWa1ZAVHbfXysSdOcmoZTjSUyL6qoocRMIEVo6VGJipce2UAF:0W5lrW+Z+bKsS4oZ3qzoH+IEC6VGJipM","tlshash":"a423e16431852082fd4b59f3ea6e2e5e93d5332be4b0a2035b75e4b4e9ef29275f1c01","first_seen":"2023-06-11T20:37:55Z","last_seen":"2026-08-07T00:19:51.480023Z","times_seen":239,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/uniswap.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/uniswap.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 9584\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"e37b3de8c0aafb5af67868f97ed65ac85105b412bc106c290c3529a696bc755d\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.354947,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":9584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6db8e4d58afd65290c5fd06f8f94cb34","sha1":"d9538b9e2d47bf57f4eb80cd340de4c30189ce08","sha256":"6c2385975e0243daae048f9bde8204b8bd5b9c659fb4c8dbf86098304d6e52aa","sha512":"b92b861b3d8f95e78c75e7aa1a5cff2d2ba76607de2644f304063b477ae03a34c0f7acce478512f0f38a5496bf65fa8e7d217a5cf6bbe90c5f53e3e43319ec00","ssdeep":"192:jR/plQvMQJuGUUAEXt43R6TMYX1yGRgL4zO8QM1:jivnJdUUZt4cY9G9zm+","tlshash":"1d12be72c8e29ef9dd18120cf63e716e3ab38fc252b5246f02ac4854dad8c39090309c","first_seen":"2023-05-11T09:51:55Z","last_seen":"2026-05-15T19:37:38.866186Z","times_seen":160,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/smartbanner.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /smartbanner.min.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3247\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"750054d3680919b77be5aec810030dbe124fcb5ed9e78c937d975b63ff013aee-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.173675,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":17107,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16954)","md5":"247bab484379bae776edb82564d58ef3","sha1":"b759b415b8e665ad0d712d2a44de9564735c7fe2","sha256":"4a5fdc0d91ddaa2517fe34136a704b7ba64bcf894d504df8bf1487d78bd18f94","sha512":"982c576fe652640b3122c94c9ff084afc70d369cae4b50b42a4a4d54a74094c489bc2bec3178c10e04310f674fed775d6c7c44fec87d69d250336fa5e0a8b03e","ssdeep":"384:77a2F9u7MQPF9uuHPF9uLotT1gIpPF9up+n3YC:77a2F9kPF95PF92aT2kPF9N3YC","tlshash":"3e72944d76e0b170c28351ae515f140bb1b4b976c09ca489f279dae46ff498a43f3f2a","first_seen":"2024-06-19T12:11:32Z","last_seen":"2026-07-17T09:44:24.571092Z","times_seen":53,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/chrome-web-store-1.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /chrome-web-store-1.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8026\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"38c1d34f1eb250bda6f4f876dd822b2782024946f5e0965553ce85031f597004-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.172712,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":34476,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b888b2af800d7d3b8db4feb2f06ddf12","sha1":"ff62a388dc2a261ccd79e330762dd1d0778f32d0","sha256":"a2e47d4c31ddfb54c20c6b85da1cfe143881fc30adf2cf4d75bfee597bf98c0a","sha512":"30a42ee415459c3853311797fd163c40809437ef28da8b013840cff3743a9af92ec58eb9b1d5dcb2ad61ed36d17acedf4de6f1d0bd985fab23f342774f8a60f5","ssdeep":"768:6Q8U0vQaXnGjqytBJH4SIaizn/eXJU9gU6FB02toU:6di/HSV936F5","tlshash":"52f283a453f5b3a0e505f3f8072664757f3611eb9ba1c599fb2d2e90eb010ae8d86cd0","first_seen":"2025-07-03T21:44:10.48373Z","last_seen":"2026-05-15T19:37:38.868084Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/realio.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/realio.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 12871\r\ncache-control: max-age=3600\r\ncontent-type: image/png\r\netag: \"455edc50559f3b05618fa328c515f57127595eb0f0708b305713a0fd7188a054\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.382249,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":12871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"6ccbd0da9b79c3f2cf485c80d27c90e2","sha1":"a1bd3b98f53ab0b58295239ce2857ab32d36ce80","sha256":"85f55d8cf99482a16f6cf8d7d990fa74df758d15abaa8436db7007f68c7db6ef","sha512":"e8b567f3a398f9482710783f12f9af8184c0ea72822dfdf5baee89eab7ab99253a906864cfee4c29e849bb21997030256105cfe1d00fe17c610d7fe9911f06da","ssdeep":"384:2iWLjBBtucWqXDgMVhQtNFczEc+q5AKQPS1Um:LEBbnQ5csqLQPSSm","tlshash":"f942cfb18afe3d8d90184c34f069b9967fad709505a39e3c4f256c1d0b2ba0f89e1507","first_seen":"2024-09-19T20:57:03.534435Z","last_seen":"2026-06-10T18:40:19.350582Z","times_seen":47,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/mastercard-logo-color.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /mastercard-logo-color.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 242\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"9b2e8081944605da0c4f8e4bade59e7e4530f2196df4c93bc1cb7d6132419870-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.137534,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"200eea74bf9c0c936c088212cdaeaa8f","sha1":"e051bb0ca9ec8585df940f8492f4742dc078b398","sha256":"93c62d75713637e2e368278d7f102bc80fa47b1d934bd5b40634d357567ae831","sha512":"a921e866d497b97c0f1909618f777fd427f6ce2c09d38914d973078545c9cdcd825c993b1b1ac2c3ec95c7717f64a08cd98006d11b451649b773aa2363dd9695","ssdeep":"","tlshash":"1cf05cb446bc241c88d8cc14225fb2e5561ee0df9e54c085b8ad9929ff2aa5a7403a94","first_seen":"2024-08-20T10:57:04.152495Z","last_seen":"2026-07-10T08:45:29.445365Z","times_seen":15,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/bitmap@2x.jpg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /bitmap@2x.jpg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 200740\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\netag: \"3370f33eac0ebd85268e943995e948db57fb1b3c885e64c0ce685fee58d81f5d\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.153561,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":200943,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1106x690, components 3","md5":"fa878f25e2ca668c8464b35481cf2659","sha1":"afbcf3a05399e213aca5e6b08c3e82dd9ea6c28f","sha256":"dd9c2b58c00a66c6ce559bf4dc7b640aac4fa06edf3e4b6e5bdf654e3ddf6a09","sha512":"65d8f4f560a92b5c7beeefb11204efb7e68d1440a45d61d7ad6d33ec855a7b7f1177bbd646bc7ed0e1c165f96a6362807a404f49e59c1453bed79798f6622a00","ssdeep":"3072:rJNGn0H57dT7Evt91neFbEpLhBDMrjRL85iPC1Fr8p/MYwBQvrkYyqvD:r7H1dMVqkB+jR3PCvgp/+QvAYVL","tlshash":"94142343a024ac7b195e1ca04f1dbb95357af854a9706f682a87e34d2d042e75be3cd3","first_seen":"2024-08-20T10:57:04.183339Z","last_seen":"2026-05-15T19:37:38.87055Z","times_seen":12,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lobstrsupport.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34852\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 09 May 2026 02:43:38 GMT\r\nexpires: Sun, 09 May 2027 02:43:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 579201\r\nlast-modified: Wed, 27 Apr 2022 16:31:23 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34852,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34852, version 1.0","md5":"0e8eefb4549a2edf26c560cb9845952e","sha1":"8d0b1718aacad934fd0043c87cbc54aa091396bf","sha256":"7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a","sha512":"237659dd4b8680ab4856d38290d57ae9211b479c51033d8db4ac61326551e33cc245ebf10eed35aab6854d8196d6651eb70cb63a2ba1d7373404851fe084772e","ssdeep":"768:zF+n1CXK5zIgArjvw2FiGzwrRnMiVPxhA31bgD8BgYyjAtJ:kAda5rRnMiVjAuDtYbtJ","tlshash":"c4f2f1e5b7a37d69c3f04922aa3e5761e4ca56eb0d60899b44438353bd6c0f02bd0268","first_seen":"2023-04-05T14:04:03Z","last_seen":"2026-08-08T10:33:58.851986Z","times_seen":27879,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":9,"receive":20,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/bitpay.jpg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/bitpay.jpg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 9039\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"1006ac667b4b9dc2a7a9ecc85aa4c50e3fd732980e0d6718cc4738208e3720de-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.316820,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":9881,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"88d61453f2e52906f883152a427a347a","sha1":"76968e9244016ea6dce500f7bb2cbca9716626c7","sha256":"f0940359bc638a7aea636ae706611c0b3a5b80ec360c2bb9421b5f7b351151b1","sha512":"738bae1af9f36d4077178cb5f7b315dbdfefd7f641afca59d920dd718c5b95e433bd03092d66df3e5f7ff8ef3a50b6789a9ac9f6435be52b27f2d2e6e01e6516","ssdeep":"192:A/+cJuCZHFludGFrUvedGjQctRK+abLDPH0LAB7w77w29a11f:MzJu+FQhvwZctIzPDsLAB7wBi","tlshash":"36128e1d333942c6cf18dfb088e909f1fbb6396cad269f5d4eca84865e9c26443c909d","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-06T10:01:23.768405Z","times_seen":835,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/robinhood.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/robinhood.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 26577\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"75ade0bd567c2c501a6849e970f9f107c230b107aa0b615a81447bfebce54acf\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.363752,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":29964,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"2753edb1da3851c521eb697e6d4582fe","sha1":"53a6d0594618bb128337c17dfb77b89e33547eee","sha256":"eda5366710b1515ef03ff189edeb1fd36c51a643f289cc4a04fef8ab29f614e5","sha512":"5ad32a87d23583a48a9da6fcf13dff12a48fafe973bfe569fc9e2f3ce7220d2d8c834c0ea8962430e5a880c75ff4e32f74061a3f9f94d64e40502b5775dfb136","ssdeep":"768:UamT8nizF1Xc85AEm0XuLSGIx9evyaSKQfiNNS:rmQniztAEmEKvRVUiNNS","tlshash":"9dd29da36b0558e3d07017bd699b27407af7e0a983f359422e64112cac337a47f3aed0","first_seen":"2024-09-19T20:57:03.523905Z","last_seen":"2026-06-10T18:40:19.363455Z","times_seen":52,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.37.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lobstrsupport.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"38df4-HxOZgbm0enZu+gphu3ito1HxbEs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nage: 2269524\r\nx-served-by: cache-fra-etou8220109-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33186\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232948,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-09T05:51:56.14132Z","times_seen":18692,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":43,"dns":0,"connect":33,"send":0,"wait":37,"receive":23,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/css.css","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 560\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"d68fabdc93cdc37dd2180e8a6fd0d0c20d5c10a8183fb9e2b33a0d3ea4e9b4ec-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873819.126739,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":7476,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"49f05e464b28f564e29f5a1e29f7db59","sha1":"4edb27f4cef909454f1ddc72b0e59b39706ea250","sha256":"08178536ea61e2b2662caaf4ff39393f016e6154f4c59ed2d660008bd5aabde0","sha512":"7e94a689c4bb5ced4177c2a9cc561ba050d817d6a86aa0e1944e852b8fa4e67ac1975075948db90139072768fde1b90a21513df8c906662a55556cec6bbbcccc","ssdeep":"192:jezPsCJBVW1+9iEgKUhQxfQELz/Fz3eBfF4Zo:yEMr4","tlshash":"bdf1c3a2145ba40467434dc223cf7f358e8f6185a045c5b6bbfe1cd8ace2d3a4366b5e","first_seen":"2025-04-08T04:05:32.411586Z","last_seen":"2026-05-15T19:37:38.874039Z","times_seen":183,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/multi-platform-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /multi-platform-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 534\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"c914a2239d9a93071950039ed8e3d70a9fd262f47a96ef192a1a1c54b0d4945b-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.143744,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1140,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"69545244f5552daac511b7de27e1d661","sha1":"732bdfe54c899731eccaecec2aef080744ba9727","sha256":"175bc6bf7fd44bc8f24716555465713d35cadb6c06e133edd43f818267db45b4","sha512":"f9b00bea234f39e423d5f70569abd3533bf8fa7187dcf9c1b24abd8553a112a2c41c489f6c8e6ef0870aad3f2a9d6d66535b1a2ec224838ff3fa6b71a2ef1c06","ssdeep":"","tlshash":"b721d0ba8a6ee98c514f891d5ffa7546472ee4f7f22bd268755cd53012031c4c9378c0","first_seen":"2024-08-20T10:57:04.17415Z","last_seen":"2026-05-15T19:37:38.875236Z","times_seen":15,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/pound-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /pound-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 391\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"7673c355091a71f5713049d683814df8e03106c50409e62e198d97b85f1cf97a-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.168714,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":750,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90092eeb157de07e6c65c2b5d2157429","sha1":"0bfb4fb807d3e4cc94b086241e7d7edbded50d05","sha256":"39b6ae4a05707a539b3e7c2071c8a772c534761351272ab07f567a01e46115e3","sha512":"c83626b38184587404068461a36aa52b847e0f132b442e4649e891a237be733ff52c5d7e6e9ffe6a4a2c649d73add67fe3d79a8a382144ed2f9bb85b34604005","ssdeep":"","tlshash":"a20197f186aca6acd09baf5d5b243449a32fb0f7f3148aa11a1cd572108b97ed6039c4","first_seen":"2024-08-20T10:57:04.17864Z","last_seen":"2026-05-15T19:37:38.87608Z","times_seen":15,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/lumen-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /lumen-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 423\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"7ac2974e7712a4ce6cdcff911500b428879019bf12fc0cb8a2c64070a0b8195a-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873819.168998,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":766,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e0162d973b59586f4769e9e9c74cf43","sha1":"a51e4e93209ec5295fd5a4642212ca05c5f72414","sha256":"574ee5e00e0ca2b0a348cca00afe48a12223815f6edac4eec47a886949edb967","sha512":"0baba7c05d0426c3c81056203c4d93bea8ea6640595bd5aacc7bf5abcac97992395b9f5f9761e23ec567d2f69f8be530c6d30a09074917712fd5d63010825137","ssdeep":"","tlshash":"7001bd73938a0e20f1514794efd8691226e2756a32d9c5f8a75227ea2945cf32930d34","first_seen":"2024-08-20T10:57:04.175183Z","last_seen":"2026-05-15T19:37:38.876956Z","times_seen":15,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/headhesive.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /headhesive.min.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 994\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"da26cd8910da73ecd058c9adc909cf407d2afbd11a0745ab848a4d4d3b44f45d-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873819.180683,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3182,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2980)","md5":"e4b4ccedf82fa8d5cebd6327c6191e0b","sha1":"9be5be3b1ec612f5e8f3b0f89042116328c9adda","sha256":"abb97637f93dce2abbbf13b35e057e9c7657b41f0d3dcce5ced279b56f3687e5","sha512":"1a0f7f2562a3f8a821ed4bf9341dc2b65cd89e1dc7e4b3df8a8c9a17fe8f7c75ea2a6f60934874b433cd442c4ee4113e8640be3a6a1f54a1b91c95cdb89a3788","ssdeep":"","tlshash":"6761f19f7281176714e7c2d8613f060e22b28168ac54844c757ddfed9c5855ee4e3fb8","first_seen":"2023-03-07T12:04:27Z","last_seen":"2026-08-06T18:17:07.588919Z","times_seen":164,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/map_animation.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /map_animation.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 268\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"bf4565fb8f67cd3be123e0308e84d3ac5284903009f25e168ea5b03f4c238448-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.209802,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":948,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"75e13c96abda940e09d130110139a47c","sha1":"31581222136e1ffd36b00f272fbc2e0c7af68081","sha256":"3a1832587746bff0cf4e9d847456ce4f724cdce9d523b9ec411bd1f7cb786e06","sha512":"5531f9ecd7e8b7c515f020dd814c7a4ad6ca4e27365b30b7dffc593431914e4b29b5c34a11f0581a83a598a0b8adc8eb8cc24cb3173611bafcdca7c7526615d0","ssdeep":"","tlshash":"d6116b8eafa81022d533233a99ff40005f3558530484eadab75c42e54f2c51c63238e9","first_seen":"2025-05-05T16:39:57.190733Z","last_seen":"2026-05-15T19:37:38.878252Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/harmony.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/harmony.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 103944\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/webp\r\netag: \"78d3043ad7ad5a43ecb79c0b9399c082e6f3f9a4ee412fa10df139ab316e15b5-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.328742,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117016,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"261869eccd4b4ba6252f7588339b9ea2","sha1":"e423aba74515a299e0a1fe3a8de688a0d188515c","sha256":"ce8f91418da00df5adc9d4dafe5d7d2d1fe5bc6e65ad8fa043863d037bbb8e2d","sha512":"6dd9c9d210fd9337c52794c60bad1c8948c342271b3c22113e0a8bcfb9c6cb36172fddd0286d171adcbea9ca49f7b6a7ff3d3cb7af7ce41e379ae0b2f8a872d7","ssdeep":"3072:2d/Dpdx3PTy8BJ4gXMx5TbiM/royQqb2:g9dx3PTyytMxJbiM/Qq","tlshash":"6bb302e79c2b3f75dcaebb24db144e814c78560135f63888da2bb1e8147b6077c422ad","first_seen":"2024-10-17T17:48:03.952633Z","last_seen":"2026-05-15T19:37:38.878835Z","times_seen":23,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/files/script.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /files/script.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 626\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"e6ca926954433455d21a096b1ec9e44bcd212cf5c7e6f920dc0033f9050841ef-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.120306,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1386,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1386), with no line terminators","md5":"ad54ef311bf716c1df2941d454d8de96","sha1":"0db1fcc66060a969aa82fb9fae457b6e66d9933a","sha256":"965387ce9489d0167cf33444ab52d064bb3fab35e94b12082ff5eb00a34c070c","sha512":"bd12169fdf87e0ac39a4b3a87f947f2fafb9f524843e7c97fcffe91b756f2a49ca38778ac99d6f14a5f5989d0a33f502658c55b95c1fbd2a0a7025a605138abd","ssdeep":"","tlshash":"38215faba80276758c70e1a7a63f371235272669640894235000d6632824a8fc379ecd","first_seen":"2024-05-23T20:15:09Z","last_seen":"2026-08-09T01:39:46.705772Z","times_seen":1629,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/owl.carousel.min.css","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /owl.carousel.min.css HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 848\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"8e0451f50900cfb7aa13d0a929b08573f9f5737a0f2a834ed5dd37f55e440aec-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.132222,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-08-09T05:55:51.191939Z","times_seen":43489,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/owl.theme.default.min.css","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /owl.theme.default.min.css HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 333\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"38c429545183c60a5b7a756ef736ca20c80ab5bffa04ee0cedeaab13de9ad28f-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.130474,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-08-09T05:55:51.205757Z","times_seen":27171,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/bitcoin-right-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /bitcoin-right-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 512\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"84304b87f2761ecd32622b8ace1050a1e852f44c5bbac5ccab947de590751ff3-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.168637,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":930,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4101dd24e461d338fb35791a14d52a2","sha1":"2860f3a15814a2dff5770c32c1273b36fba72f2e","sha256":"0a09b442bba8a81b239e9de679e038031e4d951f2ddc8df1e2790cdcdae1134e","sha512":"a3f0b6065acb5af83688c96a98a5c830865cf77d97cfee11ab1b8a70eaee9a2386ebb72ac339962168071c119ef9607ae1ad476312ae8cb9ea9cb5e7b3735cc2","ssdeep":"","tlshash":"dc1144f5476053d8dc87cfd9ff2815423d0ab02b9ca742d6c17c7d18a10a895c500d94","first_seen":"2024-08-20T10:57:04.190071Z","last_seen":"2026-05-15T19:37:38.88073Z","times_seen":15,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/mathwallet.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/mathwallet.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 173764\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"8d5bb21d7f09024e0517c61e499ebaa35ceaaf9d05b6ee30c438f65498919583\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.368570,VS0,VE5\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ae3b6cfa8c1cb78ede0f9f245f6c1aeb","sha1":"2e091d771d03bd4d536f4fb4d12a345db0b46bf0","sha256":"102058499c0eeb1fdd186bb4ab7b2d578b4663607f625629ad1286f089ae302a","sha512":"919918a15085ce452b2035a3c248a774647a868a7c68058305bbe5517defd0d55217f6bbe5ee33e94f984179d38660f01e0e0bb7fff86dff8cad9bcd2dbf4a90","ssdeep":"3072:GddNQo45WotacqiEReAWz9Pw27g0SqBJLBEyAd0HshP5afff0Q2nDbwOF8:GddDbADE8nzxw200SoJLBEytMg0dDbwf","tlshash":"d00423e0b24f0af2ccc15d93f4424ba6196aa35c4c1424d1faceadb26b6b57744ec57c","first_seen":"2024-03-17T05:24:50Z","last_seen":"2026-08-03T03:06:07.372092Z","times_seen":87,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/walleth.jpg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/walleth.jpg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6287\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"d15bc9b383ab79f7a05b6889e1251bb60a2e0c7a80e217b02a223e04e7918c93-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.413622,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7225,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"eb31718dfcaa184c92939eeb80409f0c","sha1":"abc5e316aada45ab95fd22320588031aa5b7083c","sha256":"5b17b2831da88db4aba84e58cd502092d778a6cce1eebfaf508096fcbd58b1ab","sha512":"d6dc3751424e3eb3372cad73fd34d090e4c7791885210e4eee7d0f69c45b8f81f8c3b3c572307405360bea92eef25bb50d033b2b63ec15f9b5ab14324c2c0457","ssdeep":"96:XXypRMGsaaguUYpsNxKDqehtmBEeeEV2/SGOvCEdKPh6rdoUHT4WON+MscXK:HuG5ZiSD1vBee82/SpaYmgoUH5OY","tlshash":"90e18e0abe0eab15c65dc6f06d902f74bff1062a40f48f1d0f14ed7461b92e64a608d7","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-06T10:01:23.779656Z","times_seen":720,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-2c12d9cc3ded20e8cf09a901b86f5c68.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 15:44:44 GMT","end":"Thu, 09 Jul 2026 16:44:25 GMT"},"fingerprint":{"sha1":"91:AA:1B:52:A1:7A:87:32:DD:2A:E8:CC:00:8C:7E:64:A5:F0:D4:BE","sha256":"79:52:5A:75:DF:81:FB:8D:B2:01:A9:7C:CB:0C:89:E5:E4:5E:E6:49:F2:21:FD:7B:67:23:67:DB:CC:30:4C:4F"}}},"request":{"raw":"GET /assets/insert-main-2c12d9cc3ded20e8cf09a901b86f5c68.js HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27314\r\nserver: cloudflare\r\nlast-modified: Thu, 15 Jan 2026 08:47:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6968a99e-6ab2\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\nage: 4446412\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PPemrZejZKmFmyL7lvkZ72ZnuZYf4y5X4urnuizl939%2FHYhsDsSIwcFCucN%2FgB9U5HcY51y0Nf7jxfMPbmDOrGxC0mseukw2R0tHhgACtiT7VmuL0eXwQtnMnfPx%2BK5%2F9c1ZOg%3D%3D\"}]}\r\ncf-ray: 9fc498441a778deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83491,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"9b47be60a9205427afaa3db67511ed3a","sha1":"13aba22e343283634526ffa15ffb2ec1e770502b","sha256":"4b15578d1c420a58c1c41c4a88728a887af2540cedcd064f058f92b64299d677","sha512":"7493fe9f50f66a520da4224a3514ee9f8030fae1d79708d17be392c168604c530cf7551f4d8d56659e6d3d59844f053e5b48bfc788962e2f1babc627a54a9d77","ssdeep":"1536:a6VmkhM1hDaYGcvezlk5c6w8N6Od9T2KBjtrEjv4SpkHBKlqWfw2:ZQc4yk5HKp5ffL","tlshash":"898329897040343b0aeb21b6357f310a213fe2696e495460b53ad7d07e7ae5b621bf7c","first_seen":"2026-01-15T11:14:47.62677Z","last_seen":"2026-08-09T03:17:34.404571Z","times_seen":878,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/r-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /r-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 238\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"2b8ae42801c604fef246f069526aedafe902cb99126accbaefccfbb3278beac9-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.163338,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":319,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0970621cf067e6a1bc0375848941101","sha1":"69213c4fee8520a664a00cd66be8d257e7a5961f","sha256":"b17b0ea3294e79017805886153d56993d4efb7d6278f056254c81d6d11aacc34","sha512":"6c6159f3ef294d64ec4426c28dcb110d7e6544c003ad9f11620dbc08bdfae7686391f519a40f1652948eb3e7bf4ebc54987e50d1379dec3da5d5c222eb3d4e0e","ssdeep":"","tlshash":"28e02df40eb8988dda284624ddb438cfaaa2a06e0ec20084924060203a884e2385bea4","first_seen":"2024-08-20T10:57:04.157281Z","last_seen":"2026-05-15T19:37:38.883407Z","times_seen":15,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/jquery.magnific-popup.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /jquery.magnific-popup.min.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6547\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"9d7aab993cc75b13dbe21cd8eac85ebf684a996bd3213341187de5f412c06756-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.210257,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-09T05:49:33.454751Z","times_seen":73385,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/metamask.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/metamask.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8280\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"0cc8e6c2a82c4259a811f0daeddb3b5dc632940d187d2a1c205dc498ed82233c\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.220730,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a62b5a1959b26f7780576a0b983c95c","sha1":"e2244eff885c1f9d67713c91541cb3ed95613b97","sha256":"0920740b66a4dd3325bd917a18c5b0b18810d9650013b9103fd740f888ae7ba3","sha512":"13276539fc5c333ed80812dd83d0e200332ca3e7cbb7902b49950de29785770102fa5e56f1bc0c554c807ed057d78178ee9f3dbc7b766dce05942e738146b655","ssdeep":"192:IGf4wOs5zs8MHKPRO/5ETcPO9O8XGxUbvwMZuQ4iM9z3L0:IGfb5zRPoPOzXGxUbwMZfM98","tlshash":"2202aed5f978823b2a468d546e53d6600e0dbb1583feb06f5c14b60cfff4140a8c79a4","first_seen":"2023-05-11T09:51:55Z","last_seen":"2026-06-17T12:57:15.486016Z","times_seen":335,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.37.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lobstrsupport.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.11.8\r\nx-jsd-version-type: version\r\netag: W/\"4e9a-hx1u8QcL02PqOQ4MjDhOR9zn84k\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nage: 760823\r\nx-served-by: cache-fra-etou8220109-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7519\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20122,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20033)","md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-08-09T06:08:11.373088Z","times_seen":12303,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/fonts/svg/question-svgrepo-com.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /fonts/svg/question-svgrepo-com.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 473\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"ce84c41170cb5b5e75ae762f4e927f58123004bc13b452f8b68ba094942e01ed-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.184434,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c61bc6f5cc2b605e7e5784e5fa6d4dc","sha1":"9d7cbc190bf518f603cad5e04e5252e3cb127e0e","sha256":"8fdf67fc26a8309c138179673872f92ab5c2ea89bd51d90ba905f4556b1c8012","sha512":"f7306c1e71f61f4ba2339b8c19f66599af17b719b5325a8b6fcb1a0db5a8c6d6b4b9c4e6f34e36f758a23bd6fe2ce48c70501575f9d651ebb9e77d7402578475","ssdeep":"","tlshash":"3021adaed3cc4bb8a7954331d76450f57267303ebe183384847624f662442595def9c0","first_seen":"2025-06-22T21:08:42.31901Z","last_seen":"2026-05-15T19:37:38.885607Z","times_seen":16,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/coldcard.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/coldcard.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 23449\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"c4f1d2b1ef7cb92f7dfdac52629a3560cbfe2c6a2e1ba3756b69a8670fbcc661-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873820.289779,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":23612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"9eb7fd0c3c4eadc7690cdeb31375aac9","sha1":"ab8c2265020cd5c5f553fd2ac0a0a3db57f4fd2b","sha256":"2bf6529e236ac11ccc3bc676047a16a9992ec73e205200c469c2e0df3e10dc72","sha512":"e6ea1f37c979b426804635255da4cc46aab500a222dafcbd3b3af074def3f1374e3d4e0693b297ce4a8e0346fb45482d90969655cd7ac6d7e4f9d91f1cc2fe68","ssdeep":"384:uud2MpB8UKHr6z9/a5Mud+0eyknmUbGaGpgHcZXLvPu/c3TDIQXY333J7:rd2yBnQzd+0efnhbGWWLPu03Tva3J7","tlshash":"68b2f2793b90388a44f02649919ae4e60cc9dde04cf90e6ebd83af27d40679ad1b5b25","first_seen":"2025-06-22T21:08:42.484578Z","last_seen":"2026-05-15T19:37:38.886675Z","times_seen":15,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/zcash.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/zcash.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3150\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"b1b5b1c53a8e840ee9b09ce42d2c3cf1fe80e6fd574cc7f85a23e7186c910d81-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.324848,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit colormap, non-interlaced","md5":"0747b26f4adc755b7c05455684ca2318","sha1":"b6863ea08dc34dd37d302e1c1cdea50723ef68e4","sha256":"0a98fc9d357a06ae430b95200546b96b69c2f5634feb8773e03c0d0f342d0b15","sha512":"fec5e2a6823df767db36a69db73d6b29cdcb70086b3cc54cd98a0d56c16c8cefb52aded73a01ae64b819e173d118bcd5c2992fe23c572c1c136e29a5e8c29ded","ssdeep":"","tlshash":"126129a63335ba6c248efe8f19287f5e5db671a3ab4b243d0568dcd050bc6ca310509e","first_seen":"2024-10-17T17:48:03.920277Z","last_seen":"2026-05-15T19:37:38.887653Z","times_seen":34,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/auto.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/auto.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 804\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"ec20d8bd9b27e276ac7853d221d0f93153418f2c72ced38069525fd3add7bfdd-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.414210,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2026,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8247f2bccb925bcd8cfb5308d9bde178","sha1":"abb6e2ee28c0ee407a47df247dfdf68713fdd26d","sha256":"ef918b3c1e98acb03d53019d7a440ab8f71158878ff5dfc7bb482c77ae3a7e82","sha512":"c688fed1365ffae73a31a7189f4ab4a10408548fac09f275e24c7cfa32eec9225e7b85a3ffda198e5a8b0553bc264fe6ed4e593819b77c62458339da36dd9466","ssdeep":"","tlshash":"ac4156e467e88deba30647f0c23ab8f5773734be2f18c5c890d59765da1706d048e451","first_seen":"2024-07-09T00:17:20Z","last_seen":"2026-07-19T11:15:29.52535Z","times_seen":72,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/google-store-logo.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /google-store-logo.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5713\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"a9cdaa8a33faf479c6a3fbab4e4c1630a62a8a1e7200916841f8aa9dcdb13a89-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.140014,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":22126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75dbd2e46f1835013ffd5f37edbc14e8","sha1":"d04b582c4dd42a5caed43c139751dac8472f8a3d","sha256":"2d08e796248319feec97a11b846550058b6e23dbab8c53adab89089c64e1b5ef","sha512":"25a71763b9ff881d72949fa2323bd90fc6eca684e0914ea67318751902edf69148be16c91d0e484a46076837f180dd83750a70990dde4ece70a338a75f6778ad","ssdeep":"384:GsFV5TUCmFYs7tyssgWJyh9OcIYN3oT8IeP833LV50DdToG/AU:PTUPpayicuehDZ","tlshash":"8ea275e9a3a9d3e4e405e3e8da0454217b1d28eba7d1c240b29e9e8d7f741cd484edf1","first_seen":"2025-05-05T16:39:57.153108Z","last_seen":"2026-07-27T12:29:39.583171Z","times_seen":12,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/x-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /x-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 229\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"197fabf7d872e9c124925ed327198b9246d3ac726c279c036f6762cef1208a3b-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.169754,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":387,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e04c2d3e819e966ce7f4ac571780c74f","sha1":"b71e830ae085388456f65bb1863b3bd579567ad5","sha256":"917787386ce6f2c74026274a83119b38cc05e23c5dccf9be8149e59d984c7e5b","sha512":"dc63802fa5797c498c02bb32a0a11487b0d0d41b7abfc24ccd907d7a635fe0c25b45e1709ef43988c1e4c9be190906e4ee99ab57f3c3f9ef5a11037dc0a2ba46","ssdeep":"","tlshash":"2be068ed8f380c0d35464eb0603d94dd13dca2fc36be4e02ed4e1513e098466758784d","first_seen":"2024-08-20T10:57:04.193922Z","last_seen":"2026-05-15T19:37:38.889623Z","times_seen":15,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.lobstr.co/static/landing/images/buylumens@2x-mob.png","fqdn":"static.lobstr.co","domain":"lobstr.co","tld":"co"},"ip":{"addr":"104.20.40.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lobstr.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 08:29:52 GMT","end":"Sat, 20 Jun 2026 09:29:39 GMT"},"fingerprint":{"sha1":"A9:B6:67:24:5B:28:CD:82:13:0A:DD:BE:D6:F1:9F:AC:4C:BA:A2:EA","sha256":"DA:92:B7:8E:5C:37:11:AE:42:04:CD:55:A0:52:67:E7:E8:F9:72:18:65:B8:22:D9:5B:71:50:0F:63:56:9E:6C"}}},"request":{"raw":"GET /static/landing/images/buylumens@2x-mob.png HTTP/1.1\r\nHost: static.lobstr.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 May 2026 19:36:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 7396\r\nConnection: keep-alive\r\nCF-RAY: 9fc4983e098e76ef-OSL\r\nLast-Modified: Fri, 07 May 2021 10:41:40 GMT\r\netag: \"ddb6627997f0ec39ce6b7c683fc02d46\"\r\nCache-Control: public, max-age=604800\r\nAccept-Ranges: bytes\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 c4bf4076d7670659e82264f6c24cad26.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: CGK50-P3\r\nX-Amz-Cf-Id: qkjxQaRskD-m9F0YQ79vlPKmWlJ7aEX1Au5yqFy6eBMGqaJ5Za9oLQ==\r\ncf-cache-status: HIT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 334 x 243, 8-bit/color RGBA, non-interlaced","md5":"ddb6627997f0ec39ce6b7c683fc02d46","sha1":"009004946d49818136a01b3e3f434eefb657d82d","sha256":"1f6e6d96f76647a5ea887c9f94cb4123235403e89b6dcd3a27f6428713bedee7","sha512":"4e1a52b1c7f73b08422af22c6d0909f82836cdfdf856fe04ba7c8f3fb32b0df50f9b875952b4545d50d0268edcbcf3024711814a5e46401d05097d6fca7da96d","ssdeep":"192:vSHC7JcmsT4Xs1owL0wVnmiUQQQR0vnkDXeBZdBwDp4p:QC7Kmdw4OmTQQQRrD2dBwDWp","tlshash":"73e18f4326970c0f7c53a1f9daa498ffe1549086ba8d355e469db2b88408bfd0b0ea53","first_seen":"2023-10-27T09:06:37Z","last_seen":"2026-05-15T19:37:38.890447Z","times_seen":14,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":182,"dns":53,"connect":3,"send":0,"wait":91,"receive":1,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=6594b78d07cf651483036d8a","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 15:44:44 GMT","end":"Thu, 09 Jul 2026 16:44:25 GMT"},"fingerprint":{"sha1":"91:AA:1B:52:A1:7A:87:32:DD:2A:E8:CC:00:8C:7E:64:A5:F0:D4:BE","sha256":"79:52:5A:75:DF:81:FB:8D:B2:01:A9:7C:CB:0C:89:E5:E4:5E:E6:49:F2:21:FD:7B:67:23:67:DB:CC:30:4C:4F"}}},"request":{"raw":"GET /info/widget-assets?jsonpCallback=true\u0026id=6594b78d07cf651483036d8a HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\netag: W/\"17f-Z8aapj2+t+k5frIhP9M93XOnZww\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6xD0FlCzqh%2BDNYdBaTfdl1Mu7Nuz6b757VhdPDQ0PxfPNzKXwrrewYdLePHa%2BPTi7x84J0QpLdKttqHZgUN9IXG%2Bunpq4XV9ReBbgI6ayzOO84gish9uClZPKGWv0ogfA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fc49842ade48deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (383), with no line terminators","md5":"1361243989f60b7a3f7dbb8801f06b0a","sha1":"67c69aa63dbeb7e9397eb2213fd33ddd73a7670c","sha256":"3c9c789d8acfb89f793587361924531ea4805d919361c9facce4b3a61c3f123b","sha512":"0aec14858c23da8e9648818dd841acd51350a3d5c5b00ade9b40e9da82f1df4c3b4067d67277ea6370aba16ddd5627e4f987bc6b4c90da2df7a7c4ead1c41812","ssdeep":"","tlshash":"78e02b42eb460e161b607765790e1b8774bf83150a44d6a96571df15222acd2503487a","first_seen":"2026-05-14T18:53:46.126284Z","last_seen":"2026-07-16T00:18:26.600368Z","times_seen":5,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/favicon-r.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /favicon-r.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1067\r\ncache-control: max-age=3600\r\ncontent-type: image/png\r\netag: \"f7a9c319f197a44b25d4c831e4f516b08e5142c4fbdd28b737de3d95bfe63f46\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873821.717844,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"005458bf13a10c8b20797e0feb3f59a4","sha1":"194aa97b6b3847fbf34a7a6c4d1f446097b957c0","sha256":"08afae768535c2179476a58d257043b81d325f9acc779486c1a663e7f52a05ae","sha512":"6656ad324ea355fccf007ee0206d8e340512fa4b77be3bc88cde325eabb53b292fb37841ac2e0a7377c3d530feb03c56d3abc77c1ece6a6e61d8edcc8a21e03c","ssdeep":"","tlshash":"5a11e97b1f3e7a6bc008041b7c0700d153424b7b1db1d80908209ea1af2c05df2293b6","first_seen":"2023-10-27T09:06:38Z","last_seen":"2026-07-10T08:45:29.448751Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-15T19:36:58.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\netag: \"b016905a78a33916342b0a0732d923e8eed0c11d0c4b17ed137b38b38ef25038-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:58 GMT\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.932531,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 52787\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Popper:2.11.8","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":648543,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47884)","md5":"5a4bc42073c64ae534f1fc402e4cd008","sha1":"ef77a14a0ffa6c5139f436a36577b57368e72c80","sha256":"e956397bf4472d9e2daf4af86f5191846b8bcd80a9b13461134583fbb6038451","sha512":"981e4d8973f9ae2000a911461a068f022a4d4c4854c93797cad848dafe22f0a7642728a9574bb33a635b6c6c02942552245b930d9851519d4df81e1fff7338cf","ssdeep":"3072:I1V/Au8MYS8I75tw8BU0zLRdg4a/GltN+1:41Au8MYS8I75tw8BU0zLO","tlshash":"0ed496bd67420ae9de455acde8c1156129da602f2ab983ecf71ec3337b15cfd8870912","first_seen":"2026-05-14T18:53:46.136906Z","last_seen":"2026-05-15T19:37:38.892793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":55,"dns":20,"connect":13,"send":0,"wait":15,"receive":15,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/logo.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 975\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"eee0f868ed3766bc0779740af345017da06e976100d3feea6b729452749ab82b-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.134399,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":2015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6a8a34965ca5818e26980638e2140fa","sha1":"3c001a4363cda57f94e4474cf99d4e8acb536995","sha256":"d6741baab1ef8f77af755169b1429437062678a5a387a41d0a5f46f09df4e5d1","sha512":"60a3524770c22823031bac40ca5de19c9af99e247ce9859e0f100dadec386cd9398dd8b2830db8de0031be2a2d71517506cfe36a1901348d7feaf2dd1c5404a8","ssdeep":"","tlshash":"154185e59fb422bc99cbcf17ff241809791b54fe32a18904a30aaeb46b4b2d4e404c54","first_seen":"2025-07-03T21:44:10.473424Z","last_seen":"2026-07-10T08:45:29.488238Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.lobstr.co/static/landing/animations/map_anim/map_mini.json","fqdn":"static.lobstr.co","domain":"lobstr.co","tld":"co"},"ip":{"addr":"104.20.40.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lobstr.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 08:29:52 GMT","end":"Sat, 20 Jun 2026 09:29:39 GMT"},"fingerprint":{"sha1":"A9:B6:67:24:5B:28:CD:82:13:0A:DD:BE:D6:F1:9F:AC:4C:BA:A2:EA","sha256":"DA:92:B7:8E:5C:37:11:AE:42:04:CD:55:A0:52:67:E7:E8:F9:72:18:65:B8:22:D9:5B:71:50:0F:63:56:9E:6C"}}},"request":{"raw":"GET /static/landing/animations/map_anim/map_mini.json HTTP/1.1\r\nHost: static.lobstr.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lobstrsupport.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 May 2026 19:37:00 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: br\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Max-Age: 3000\r\nLast-Modified: Fri, 07 May 2021 10:41:43 GMT\r\nETag: W/\"d722efa17d0fc4e5aec7af663b70291e\"\r\nCache-Control: public, max-age=604800\r\nVary: Origin\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 d27d3f4230954794eccdc551e04ec846.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P3\r\nX-Amz-Cf-Id: Dsjr_Jh5JhwNB4vRiMJlZEj0cyEN-N9nAjBTa93_mbQMN0zqYVZw6w==\r\nAge: 108026\r\ncf-cache-status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 9fc498400c678deb-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":582873,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d722efa17d0fc4e5aec7af663b70291e","sha1":"b59441ac0d1cb0101405bd4d5947deeb64df686f","sha256":"1f5eb3c2391aa91a3e31fb31dfff145b579ff0df23cf91126a68ecfa41d91d21","sha512":"643043ff596c32da1a4298c5b1e20886f5ae8e54bd3a1db486f07a04998a4b808c148650efee61d06d42d8eb73c9e99994894a114b30de17e354d53bf446b515","ssdeep":"768:tv8KNs2l53Y1p6qOokJvsGhJRniiRXy0w4/DT4hpXgSrwQ:tUKNn53Y1p6q1kJ1JljRi0//3xQ","tlshash":"27c46e4503b10adceb4a2e80c64371d5dfc44d66efc554edeabc9e249aeba6d2301e13","first_seen":"2024-08-20T10:57:04.225677Z","last_seen":"2026-05-15T19:37:38.894561Z","times_seen":14,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":56,"dns":1,"connect":5,"send":0,"wait":141,"receive":27,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/nunchuck.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/nunchuck.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7530\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"7227d17ff716cb6fe5483fe41469f4b1172ba1b27e8bc7837012ccb37e5a769c-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.316946,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":9308,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 299, 8-bit/color RGBA, non-interlaced","md5":"228ebac826617712d60ea043b673a128","sha1":"ee200ad61029798935361f1a988d2091e2ffa94f","sha256":"2960f802a244fd84ed3a030c918e6945db1551e94e9f0a3e320b04af59eec49c","sha512":"73262a67f21e05d1fc2c83deb44b018a5dedd3d14adf1d1cc3102c143e79d390396de6d61cc57408c483b2d85c1f64a941f228afeb2fed0079e7a2233772c56f","ssdeep":"192:/6wWCKCKCKCKCKCwHiOGj8LZgWsOc4KtppR85ePXhlPTl5+vGf:/dzOGj8lgWR9KrxXLTl5Nf","tlshash":"2f127ee371c2b9b2a9c88a3ce5af40a4d0d9d5655e42f213db101821cb93f59b4df8a5","first_seen":"2025-06-22T21:08:42.439708Z","last_seen":"2026-07-10T17:06:27.248371Z","times_seen":40,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/clover.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/clover.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 439\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"0dadfe798c5cde574f57fd94986953b1860de123001b278ec19f1fd0fae9080e-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873820.364142,VS0,VE3\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":965,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"37796dd9062d45b794ee7e19d68833c5","sha1":"9465305944380d3e8b93d3873ce4a8cc71cfa4be","sha256":"5b372cd255e8ef546fdf304a1ea1959b145e6ec09e3f84bc7a541d7818603a18","sha512":"2b9f16ff13d0af7ff5fbfb599aa9452b23a61a085df96fc07f5304d30d6419d3de97ccb91eb22cbac5b4db7f87bae4bcc68da6195136b762ca41c22fc35fa877","ssdeep":"","tlshash":"d51114bc603cb5fdabc6e17cdb538815016514bb7b018735d1a23a2bbd1c15f19896d3","first_seen":"2024-09-19T20:57:03.497121Z","last_seen":"2026-06-10T18:40:19.437518Z","times_seen":48,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/xdefi.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/xdefi.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3805\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"546fc7dd1bbeedd08f0906aee26c508372c2a589858d58a6192afcb5020cc210-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.367502,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"04d8cfb1198a9a94ced97fdfa0b71b99","sha1":"1ad418dc57cdece86cf46b062e545a41cfe0308d","sha256":"41c5ede7f95d24a525d4736af5581dce364e930c9c58e48e68b027f1521d7a92","sha512":"9d5f78108f69f22a84176f3cba954e2e3d8bd4d49b63684e3bb6914d300c3c5d6099ff89e0f14ce96c14de08df0fd6d8456a2be553ce1f09cedc2ccad0fa9383","ssdeep":"","tlshash":"7d817d40e19a85dde3ff6a35593ed7d98486c11202ab32c2e511f6f293c42c24b264af","first_seen":"2024-09-19T20:57:03.503197Z","last_seen":"2026-06-10T18:40:19.412728Z","times_seen":42,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/jquery-3.5.1.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /jquery-3.5.1.min.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 28008\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f43efbb8e7687dcd4cfee4df24a058458e4545c3d18e3c274569cc44841ac248-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.178641,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-09T05:33:05.215656Z","times_seen":265977,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/trezor.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/trezor.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1377\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"eddc0da9a99eb6d069c4bb79f0b9da2ab68ecb8c46afd87bb962770d9f825b3f-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.265878,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit colormap, non-interlaced","md5":"a487a9ab1dfaad8367bc4bbbaf8adb4f","sha1":"85223b7780bca3b037c3fc9cb73f82ee65d9c656","sha256":"d2a9eabb71780be7114ecbaba4b43e964d8f783c4fb3e847847c97def51d838f","sha512":"3cbd4f9d5acb86f585cd0b23e564ed1bccd07c1542ac0e5f53528fc65897c336484159411e5c0e9232a3051a868b6093d467608fd4b0c316d15dfd2411c6357f","ssdeep":"","tlshash":"1231c9f45f6d8ed6f7656cb1425e4593402150f618ae8cc73536157daa04f0d947283a","first_seen":"2023-08-12T22:37:38Z","last_seen":"2026-08-04T15:58:21.546598Z","times_seen":141,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/pali.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/pali.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 9190\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"f85cf69ac06e0de17512a06e71119252bd2c68ff100893291212666612fb3c4c-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.377222,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9626,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"3f7ae9a5c5a2007165599afa778e40f1","sha1":"7f1733bf599b7e57bbee3dff0d9a29fb86bd5c8f","sha256":"99b01592e7c6380c7a138cd4cda8fd5227d7bf320f5d582f177de7d4e426876f","sha512":"5e12f22f5420d2cabe9d610edf5066b5ffe275107643830eda7f636d19131bb23566c09589c6bc16679d65c85149a2946530734018ae6a2235ef88273224dcf9","ssdeep":"192:OpgvoVYzl62iotl9prgu12w+QGCMTEzTlC4UeeOa+u+xgG+kcfe56MWf:OpBY8239prQoMEJSgzTDBi","tlshash":"4112bf1a5ed5f945cc8de3acebedc03c8a2c4c403980e525d5e8a06058be6f9f640f82","first_seen":"2024-09-19T20:57:03.52227Z","last_seen":"2026-06-10T18:40:19.336727Z","times_seen":51,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/iPhone_X_Mockup@2xV2.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /iPhone_X_Mockup@2xV2.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 37316\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"5f4663aa93ac4c9830c0f9d2a6c1ef8869f27bd4ccd69027d99ef8f4eb44c8a5-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.142755,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 351 x 724, 8-bit/color RGBA, non-interlaced","md5":"dda4d5d85909ceef7893bf01b069fd97","sha1":"cc0f4abf86e3ecbd58c2f3a960da8a930636b07e","sha256":"a463740be2d96601fa58039deac16e8a28e7185b4e60cf3aa0ed3bcb4cefcb91","sha512":"5442724dbf43277969a08bf66c2b904286e5ef0f07d6d9100f6f302292bcc8cef04c20924afb4c75bcca2bb4403deb9f77823c44d8461641bf86cc13c3648863","ssdeep":"768:43rj2AgmujuaVBHAn7cu1z7VKULVpEV0tHaZLWb5bzo4zelo:43v2yuCe5ARfpEV0ZaC11","tlshash":"2703e07ff235242bb12ab4b1591710423d490fa90efeb5cb25e7a861eb1e6ef6036105","first_seen":"2026-03-27T07:10:53.893621Z","last_seen":"2026-05-15T19:37:38.898839Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/security@2x-mob.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /security@2x-mob.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13572\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"3a1daf3311bdb77a5a5a3784a8fabd32391fe6e5479d41dd1928024c8d5298eb-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.156993,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":14914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 372 x 308, 8-bit/color RGBA, non-interlaced","md5":"fe89e9bdb752047c57cf67f1dc5f6016","sha1":"a586a2d561e1583939d2e0f79fbb302d96ccaea3","sha256":"109c30d796c479ff7bdf5e752305f3c5788cdadeec727ffd884f7159de39297b","sha512":"90ea403d3fe2f672c5702d907f19eb6429c7d85935bbb66fd2b7c49ed4b078639afb135fb4cc834a5b4b649ce35fdc85ddf146812605b13f6f4c23f91e701177","ssdeep":"384:+dAPpNZVwwwwHNBCwiVeSsTGQ+BTKowX+TJ2XNkqIAGGGGGGqP:+dAP3Cwd3+hQX0J6c","tlshash":"7c62afd8ac9f413398cd0e648680f47debed2d182e0c9854772d081e2e31ceb21bea65","first_seen":"2023-10-27T09:06:38Z","last_seen":"2026-05-15T19:37:38.899714Z","times_seen":16,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/output.0d86849d05fe.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /output.0d86849d05fe.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 96\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"e28f023221b228b42b16533f496f0fd024e5c210297d2a8f8af9a65e42cdf2d1-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.209753,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"86b1804b150775465738a69c2a8bc3d2","sha1":"587de1f104b69a73467d663783a2fef656a1e2ad","sha256":"0d86849d05fef64f1c443de410946770a52f668e818d759ce0abf2f46f2e0e44","sha512":"cf139b664534b5fe5956f2b738718ca314021999baf37e6ea59caea80d03a46e9e7a4a17bb0a65e6df750e6adb14c75f232ef18549164acd2ed4825bb13fc9a8","ssdeep":"","tlshash":"50b0145d531171550345f3fd457f555cc57f450147f341d54301f15415d15f5d010d1c","first_seen":"2023-03-13T13:08:22Z","last_seen":"2026-05-15T19:37:38.900211Z","times_seen":16,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/js/jquery-3.4.1.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27755\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"c4a2a9e308b6bef0548f22a852194250223d34a29cb27a95adedcc838534abd6-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.210602,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":88147,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-08-09T06:33:39.778573Z","times_seen":5619,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/xaman.jpg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/xaman.jpg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 16110\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"825e4abc4499cc3c1510563de3eff34507fd211d3166bf9d6050932a20802380-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.194560,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16703,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"eddec5816b2ea44b612c3020541b2c18","sha1":"6d577341bce3a18c62d7d2d5413cbc2d329b046e","sha256":"ddd9fa5afe61bef34226ce2af120efe63073f5b9dd3de62839c1935295a70718","sha512":"51dec02510130ccf9fe52e1652f4908c1ff8c7ecba7ca52d6f9666b89419960cdb26ccf6729bd273729bb7b04c5d3973a433c31c2361ec81477dbe106e0c6435","ssdeep":"384:sxxtnYk0JLlPyYLTI7eV4XEaFp36HZsSrVk2yLyWuAGD:eYzLl11aFl6HZnrVk2yGBj","tlshash":"1a72c08bbb950891cebc27704deb6942d6287d1b600d2f0e16d9212ee33b23b5bd5a54","first_seen":"2025-06-22T21:08:42.304359Z","last_seen":"2026-05-15T19:37:38.915875Z","times_seen":15,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/walletconnect.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/walletconnect.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 4572\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/webp\r\netag: \"c61d9434dd323cc6a16b02610e61b9239113a8510c612df9293534f642a8dc74-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.209097,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4624,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ba0e02799c16aeb565f47831d13afba","sha1":"8f902e52b5c0964ec450928efb2c3855c6190d04","sha256":"eac7ee8c6a37d9123559885b66593f39a9c9dfe38997bf9f50da791ebe907bb1","sha512":"86151fb8dde8a57997127684160670a682a42e3191ea4c70505fb979cf972eb7d6f2dcdef9360e79c05b02c1969269e93a5844df6a80a54e87f80d8930dc3414","ssdeep":"96:2saWJDT9QuyJDEWRCWpFel5S1RURAxrbRUi41tnnmwNt+hhEH:9fdG3wWpFSk1KR4rbRUx1xmAt+h","tlshash":"db918d7dc98cfc01f2d638fd19bf812b975001dcb11b8044827a69d45b2538e66ab897","first_seen":"2023-10-15T23:58:17Z","last_seen":"2026-06-17T12:57:15.47043Z","times_seen":489,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/imtoken.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/imtoken.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7778\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"0bff8fc68a10386b67c81f39e45528d3e4144aa3a7116252f6b87a40032008dc\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873820.354925,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":7778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f7386d5e159312caeb339fa3d6dbca0","sha1":"64db7454cf8287aab0c31057eeb66fda3f7a5c1f","sha256":"aee2e40357faa23a7183ee2dc1a1150cc3d94ea5a7858ef6a0efde3401ae76c0","sha512":"6e3f07fa9a249444f24d23a536a93642cfcaef25010ad4304fbf3ad89a4f9f1bd894ec6d7219bc4f7be0fe419cbadd8662b99219a800639301db2fd08a583545","ssdeep":"192:YT50/dvO29BD7L56jKPPz+ICOu78dhSm1WR9:YV0/dtQSPzj9T91Y","tlshash":"6cf1bf27641316bdc9f2382d91c57b8b823fd81251dfd9bab0092971423c4f9bc158e6","first_seen":"2023-12-01T02:41:09Z","last_seen":"2026-05-15T19:37:38.917546Z","times_seen":85,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/lottie-web.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /lottie-web.min.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 51113\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"b4acc90c25d04132d4318b7252240cedefb717bcf7e882a39468df8895c8dfe6-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.210063,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":241359,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32012)","md5":"e21b8cf3a5b4e498374cd4c0e3c35138","sha1":"175adf8b463ba57230aefe1c12c325905a98c067","sha256":"7ba983582919be862a6122e3a8fdad742a1e10ef6f5c9a5c5d84ec53de53d43a","sha512":"efec9d3cff965a04a5ad6588e509f27869eceae358731ecf4d89923b783ad315dbdc8e670411db088ebde63b2a8475678ba240ac551bffcea5fd786e78213283","ssdeep":"3072:+9yA8cMkU1beWvPSIoPanG2QcOXOCZdk5Wb1pmbbM5HK7:+NxU1beWvPSIoPacBe8hQbcHK7","tlshash":"333429597154243845c540ae806f1a0bfb36292e245ac45cb378f4ffa8bce9d31beb79","first_seen":"2023-03-13T13:08:22Z","last_seen":"2026-05-15T19:37:38.918406Z","times_seen":17,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/api/event","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 77\r\nOrigin: https://lobstrsupport.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":77,"data":"{\"n\":\"pageview\",\"u\":\"https://lobstrsupport.web.app/\",\"d\":\"xumm.app\",\"r\":null}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\netag: \"daa499dd96d8229e73235345702ba32f0793f0c8e5c0d30e40e37a5872be57aa\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778873820.588163,VS0,VE165\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-08T13:59:19.125614Z","times_seen":4795,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/trust_wallet.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/trust_wallet.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 4359\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/webp\r\netag: \"50d873c437e4c327db891caec878f13cc47a763f0a750a8a629bbc96d50f0cd3-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873820.256633,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":4412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e26bdec2a842132ec688ed6584853d4b","sha1":"94c5a4859f4d3d5df794a4bf90a4ac876026e15d","sha256":"ae785241ce0047aeb8de19a5fa871c94c002d41e60338fe7e37f7b0bfeb929da","sha512":"c6728d79045e58fcf68b00b94f24ccc66fbe576d3c6ba61e1cdcd4d9fd95364fefd535dfa8d5080f34fe90871dd8f45b70c9c96028344d0c4b1cdd08dd4ac7d4","ssdeep":"96:+zQVRrxq8JywpNoad+gCMXY1HqKQPBFnZ2soYoUINpva91aYeVjC30/:pr1qwygUzwKMFnc1Rpva91afVjoy","tlshash":"35918d4780b777c4ac3bd5c39b22e30266ef0931e1cba910c225f26859861653a5c23c","first_seen":"2023-10-31T08:06:28Z","last_seen":"2026-05-15T19:37:38.919929Z","times_seen":441,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/blockstream.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/blockstream.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8348\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"5d1acc464d368536518ec71cf14aefec2f5564d6f351236a82605106bb27346d-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.259388,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":9918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"a95b33b80f095ce151b958808f2d3bd9","sha1":"ee02afc222d0196a807b961bc2d3a3f37ee662c5","sha256":"97b61d159538d313acad3ec475c8b09aefc84518660164e400b5cd1b98c9fc75","sha512":"50e2b9a69c1064d6f8d1574e7982a6a68210e79de5d9d03a72dcbf57811ffca46d7dda6d2875c64f6b1be22998d7432f71dbae8c946b31790ebcaf64abfcb4f0","ssdeep":"192:VG79Yz8wTp6hc4G8zCbmDrCmNn9hr0EwTdXMZQI6:VygHTpu9ZzCaKmN3QBdX4Qt","tlshash":"ba220b855d980d8e6029971790893562d4f070a3a3bfc37ef0ae7f6411e52d9bf9cb42","first_seen":"2025-05-14T11:16:41.349678Z","last_seen":"2026-07-10T17:06:27.281394Z","times_seen":41,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/ellipal.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/ellipal.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 16377\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"aa2e51dd641de04da65c54b8cfb1614ec6f4309499a41c47b58cfa934b61c0db\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.377465,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":17035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 460 x 460, 8-bit/color RGBA, non-interlaced","md5":"7e483184c41a8bc879b6a866989ffb54","sha1":"4aaeefcadebec5dbdec7487f14de03b8083b2005","sha256":"4edb4ef4c351cc38de5dc8d011381f79746c17a6830a45ce2e4eebae9ce2a42e","sha512":"cfd3c6824990e27aace9ee02cbde5d5b32380359aadbc5862aa83be63f99ff2f1c24fce8edacb50cbc3983cb14655c3072c880ba4120b0c0df92824b51ec82e1","ssdeep":"384:IvUFD2iDbT+P6wqV7MMSskpNeIME60moI/Wtu3vEhh:ImDPmCwGMMSDpNe67moSeu8hh","tlshash":"6a72be1926bf713012c2105b9137172f4f41b3b7ab7936bf91ed87805c9ae1c8991a6f","first_seen":"2023-08-12T21:52:13Z","last_seen":"2026-06-10T18:40:19.308882Z","times_seen":54,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/guarda_wallet.jpg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/guarda_wallet.jpg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7275\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"a29715bb83c0e518c95c9c290569da3008878313c4cedd9136522cd1ee18ce57-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.412636,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":8032,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"521d0a27dff013b0b9313ed91121b20f","sha1":"8d4a2cb408105f8b87fd1cb852ab813913227ea0","sha256":"eefc338f4a2058461b6800c0fc41481ad508984f3ac5cd2c49c14dcab80eff06","sha512":"41da961f1b7f73aa69b1cf2cdef84eeb71692ad1d4367f92f7f62ece82db3355368ecf728d9136453385418fec0b051d8152b868e3f164e793e73dffe22a94ec","ssdeep":"192:MuTHUGc+/wV6jZFdkGFTQdAwjmIBONupxJL4jB+:M6HUb+/wVAFd/T0jnosg+","tlshash":"31f1be3db92b88a4da51d2bfe0169d5123977656fc200f4cb34585d987bae6e11c30cc","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.826344Z","times_seen":667,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/New%20landing%20video%20Apr%202024.mp4","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /New%20landing%20video%20Apr%202024.mp4 HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 12492096\r\ncache-control: max-age=3600\r\ncontent-type: video/mp4\r\netag: \"e86d2a414bd456e1eea4262641001e9090a7467c61227e6a38843ee0c6d9af8e\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-12492095/12492096\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.590180,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1902716,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"40d260a81a034b42bd51077fc6834b27","sha1":"9f73bbfae0b045e51ba72ffdc5bbe8a993f1a810","sha256":"ba47fcac6420dbb3b0b3e6f77000826b3fb166defd5f697ad01d8de9c049f1f4","sha512":"defbcfdb89bb686b0972ded86761f430e85eb02ca94f0157f0ff4edf4ab6adc77ddcf368bf6d58ed436d2d39716289f2da48a45719f46a695febd3218bc1f9f3","ssdeep":"24576:+hBikH/vmH7YCz13/G30No1KSs5q2AdHk:+hBPH/0z5+N3s5qy","tlshash":"2725336030821d84d8b49efa7e471719b8446ae058eda7b3a3f1b6dfc7d0825ba136d1","first_seen":"2026-03-27T07:10:53.968458Z","last_seen":"2026-05-15T19:37:38.922519Z","times_seen":3,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/kaola.jpeg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/kaola.jpeg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-length: 853\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\netag: \"daa499dd96d8229e73235345702ba32f0793f0c8e5c0d30e40e37a5872be57aa\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.412749,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-08T13:59:19.125614Z","times_seen":4795,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/coinspot.jpeg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/coinspot.jpeg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-length: 853\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\netag: \"daa499dd96d8229e73235345702ba32f0793f0c8e5c0d30e40e37a5872be57aa\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.413158,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-08T13:59:19.125614Z","times_seen":4795,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/hash.jpg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/hash.jpg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3330\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"dbead95e744af6640c7ee094efa889c9baccc35b6569a745f7f8a73169082203-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873820.412643,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 166x166, components 3","md5":"e067d29462ce8093f369cf24a2cdf2f9","sha1":"6ae74b3c7f261601d408cffa64988d7c467bfb03","sha256":"994aa520ef9778d6ad674ad9454b58826e84446f5bf2307b49d015b368cd2246","sha512":"3c5490132608d49804a6a907f9ab8d16488dd9e22088fedfe2a69ee09bf928401e6548c855eff1dbe0baee7acb69625a5f69a9c0a687ede49e58816e201c1377","ssdeep":"","tlshash":"54616c6390d1cb35f635b37c2a28133d32e54565da906f531852071066dd8baf8fa32c","first_seen":"2024-04-30T18:55:15Z","last_seen":"2026-07-10T17:06:27.254677Z","times_seen":103,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/cube-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /cube-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 517\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"1b84798c37059100dac3d3d2f428ab4a7ccf2451e4af42ccbae2eed143553e8c-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.169981,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1068,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e486a606741cbc4a2b6fc7faa58ee836","sha1":"db1f30a998e3166b275f10a45dee90c683af48a9","sha256":"6266dc098a172b068418f4fb7264d5745846acdbcfbef23bb354dc1446c268c8","sha512":"a9075a5bab8bd58c52583c934af06787e7706e7a3870689535c67c8a6e870552cb7172c470b00eefb61419b075f5146b2e278f06bf5ff491beacef2d2edaa635","ssdeep":"","tlshash":"dd11daf6033c59dda58b4908debba0b4472f94b476b803d408afeba68443bc0e51bc20","first_seen":"2024-08-20T10:57:04.191699Z","last_seen":"2026-05-15T19:37:38.92401Z","times_seen":15,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/sliderInitializer.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /sliderInitializer.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 161\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"1029e4961482c499b5568e7abf00c30285ddda1092f8d31742dd5755cef3e048-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.210063,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":431,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"5c3864e5bbac6980e1754f73cc151df0","sha1":"5ddaeb25642b8c78412c7f3de01ac21e92c4d071","sha256":"342e39c3040e8ff31f687887755b891598fcc6bd6163bc38e8ab77f8fc707b8a","sha512":"a8578d5ba7f8dcae703aef6c012182f0d8a4e9ec7b1a37911e17dea4d409886fa9faad28671508c46112eecfa33e0f8f23f613538f8d3c84de6550161a2b786d","ssdeep":"","tlshash":"7ae0121d69b80461153370380e6ea104ed19a0479d59fc61bf8e95d06f5c32f66fb7c8","first_seen":"2025-05-05T16:39:57.239Z","last_seen":"2026-05-15T19:37:38.924995Z","times_seen":8,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/solflare.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/solflare.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1060\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"fcf831895834823fce4d608d65ccb6964d173f6914fa13aed5942505ba76f76b-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.316780,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":2430,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8672b855f85fd959e80efa1fa8f2a385","sha1":"1b24c9da110c92066eb57685034f1dfd41c6927d","sha256":"6ebbeff35834ab2030fada9fccbd2315e21b6a9918530d306d9f8885cadd7cb1","sha512":"57d2f3db871075f5837ae0d20111756d0e84c52d4fb834c37baca13ba4e5c44da37a4a5199dddf0711e786a7e00fa363d56b2b8b3c3f914edbeb84c11b69321f","ssdeep":"","tlshash":"ec418673f3e8f1d9ed8ee5d26ef7d47e500a346556d9907a70f39b0880259821c88620","first_seen":"2024-09-19T20:57:03.483171Z","last_seen":"2026-06-10T18:40:19.472084Z","times_seen":82,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/solidifi.jpg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/solidifi.jpg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10001\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"6ef0912db1c3b67308afeed04dc1e4caac955918fb758ffa4402f562bdcb518f-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873820.317252,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11033,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"9b8fa4a2863391afb8dab1a18a88e659","sha1":"240f8e8944fd9d1144b26ea47a9ea8c6b8ed25b0","sha256":"6add47ee5e1748b897ea43387bec1c01da5856924645a06e391322f050e179a5","sha512":"d005ee910e73eb178200e848bddd460ac6ed0fdabb176e0047609a92c8595d5f0493b895a4172f161867a97c08e581d780069ba546e28442ba732c8a3e24aea2","ssdeep":"192:sZw/y9S2YUKmQszCFu44Qntvjf2nKzScz72eDnWr4wUxVmep:sy/yhYylQtvjf2KzHzrnWMwkmep","tlshash":"cb32ae7beb33ca06cfec373906c31b525797ba194382750b6ce596317b7a2c18a810c9","first_seen":"2025-06-22T21:08:42.44249Z","last_seen":"2026-07-10T17:06:27.237935Z","times_seen":36,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/coinbase.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/coinbase.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 4356\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"76bd660d77792bc62a987be5d64269c73fb70e7a8be4ca8821c6149465424719\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.318820,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2f2ce7cf8a0ba0c81ed375f6b440af14","sha1":"f16f0bbbea3022455bc815586b3b8a8b39be7a74","sha256":"ebdadcebe2037cc79664c70717a4e2cbee3bfe4abe2e07bb4d9d4fe634d1497f","sha512":"5aa21c0ea7771e2502ce2ee20a72abddd8076bea4556d243c60919a19100d0e02762cc6034d953e872b9252d861eebe4baf45307c0e68483d351649d9d8f0941","ssdeep":"96:Mam1jojJmYwzRPWf5PHvkw50m/dasR0Yp5rWUyn2SZQfXVsHGEVmZo1:9YNPY5tymNR0zn2SZQWGEVv","tlshash":"bb917e2e46b6b2c9dc49111618ecfaceedf732228a03995f57ee07497da52b93142c06","first_seen":"2023-06-19T19:43:02Z","last_seen":"2026-06-17T12:57:15.494763Z","times_seen":457,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/xinfin.jpg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/xinfin.jpg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8151\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"37686c8c3ec103247c5e1199ba6559fd2d85756f298d74166ee4108f28915a78-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.399814,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8981,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"60f87e16077bd56afa4dce8e0651f619","sha1":"6a803a4c96451869d22c84920d262c6c6a0b7f52","sha256":"886989ea7749a43c57edbc97d5e2d133061c68c204c25b5ded17b9dfd623a9a5","sha512":"3f0bef602cd653e85a682ee0c0f78cf2ff965b013efea89578fd7c43c58d921cd8b2a18af8459d9977e72ffc9ea67f2ac4bc1d94b33923b3f77a412e23ee617a","ssdeep":"96:U7lcn2U1OsATWXaRCAHGroxs8XFZo6Kqwwlpfqx6f5s61c3PyiZcqe8isTWYQCp+:XBlXaHx91WrPV6fu3PyiZcnQVBpOHP","tlshash":"a602ae8b7b2c4266f200cfba566b112a5e671821f133decf4b66e5a8f0b1851d43c4e4","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.771094Z","times_seen":598,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/coinlist.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/coinlist.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 142087\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"508aa82b2dc5099942ba2e89c2f0fcfd04f748a65d0336baab710174b430b1dc-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.400114,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":331403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"70d9efebf82659ffd6a3ab1522175dc0","sha1":"6fa8a52137a4ecdd97e81d2e5d6772f7bac4e2ca","sha256":"e6c187e1e2b3cc9773063c9e2ab66cfde20dc5d041e7acfc934837167200d957","sha512":"f423ebf9b003ba7f5a447c7d5a6103259e74006a9146fd2cebd58f9b51c0eb9aea350bbdbf58e7f76a848d6d96978b62046e22c9cce8def8dc04f700eddb1eaa","ssdeep":"6144:AzVdvK03sg04H6j+UT1UD0Yl8iQyjzGeQidFqZ1mMVy0+UY1m6sIEDgEySpT97Z:MVdvK08g03j+UxUD0Wfd+1mM8A/IEDbp","tlshash":"0f64d0f2382e38f27c8b7b7f6c7252d93078b926416053aceb9238e067da51175d2653","first_seen":"2024-09-19T20:57:03.542455Z","last_seen":"2026-06-10T18:40:19.449856Z","times_seen":51,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.37.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lobstrsupport.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"eca1-s8rO+fzPpCquvWHwRvISPspZiXM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nage: 335960\r\nx-served-by: cache-fra-etou8220109-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 17209\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60298)","md5":"f63dfbdcc649f13af4791a90e51f7907","sha1":"b3cacef9fccfa42aaebd61f046f2123eca598973","sha256":"60c6bec0033a424572cfdf7da1d5fb94f4719286006a7f2cb9e76ee24d99babf","sha512":"596f3f8f19042ded820221382ef41fc26d6b6a3392f0f1dab020b1fa49c71b48011edf045f14ba4fab494531ae0d056796eb80bccc561788fc48d14329c78b16","ssdeep":"768:QkN++EvGHWyOOY/JaAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7w:QpxY+t/Nhh+1d76KV2O9Ed","tlshash":"6f43b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","first_seen":"2023-09-22T01:14:35Z","last_seen":"2026-08-09T05:51:56.053476Z","times_seen":2286,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.lobstr.co/static/landing/images/security@2x.png","fqdn":"static.lobstr.co","domain":"lobstr.co","tld":"co"},"ip":{"addr":"104.20.40.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lobstr.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 08:29:52 GMT","end":"Sat, 20 Jun 2026 09:29:39 GMT"},"fingerprint":{"sha1":"A9:B6:67:24:5B:28:CD:82:13:0A:DD:BE:D6:F1:9F:AC:4C:BA:A2:EA","sha256":"DA:92:B7:8E:5C:37:11:AE:42:04:CD:55:A0:52:67:E7:E8:F9:72:18:65:B8:22:D9:5B:71:50:0F:63:56:9E:6C"}}},"request":{"raw":"GET /static/landing/images/security@2x.png HTTP/1.1\r\nHost: static.lobstr.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 May 2026 19:36:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 34512\r\nConnection: keep-alive\r\nCF-RAY: 9fc4983e0c5c4c11-OSL\r\nLast-Modified: Fri, 07 May 2021 10:41:39 GMT\r\netag: \"6009ae476086c38b6bd3498a62306f20\"\r\nCache-Control: public, max-age=604800\r\nAccept-Ranges: bytes\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 1943af12d816afc5bfe1ce2c8b3de416.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: SFO53-C1\r\nX-Amz-Cf-Id: s2hFARMbzJ7jWMAKFOWwNJifxRSl7YRr2rEJiwL7ykXaTMxZmZuUZg==\r\ncf-cache-status: HIT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":34512,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 768, 8-bit/color RGBA, non-interlaced","md5":"6009ae476086c38b6bd3498a62306f20","sha1":"48b3b62efcd42ab5ec40924c18ad443a3eea2ee5","sha256":"edfce9877d3608b6c462d261f90d1d52ff0a603572daa502c97298ffc7cec595","sha512":"c9bdbd98d7335be4800e653f850cbe381c79f4bbac26814b2bdd74fc1d1f8ff3e7bc3b9e04f24f352d14f6a65211bdb0543e76a7f15a818b32091d61aaa7dfa9","ssdeep":"768:UaVYxUVbJDlrz7ZBJBXYYBvosdkavgChJslJXf8XECzd:UbxUFJDlPbJBXYYKsMCnslJIEC5","tlshash":"29f2af13cb80756f769842a462936a8b41b4a8337120ef1b8f93a66e5b47ff0fc71d51","first_seen":"2023-10-27T09:06:38Z","last_seen":"2026-05-15T19:37:38.929739Z","times_seen":14,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":187,"dns":57,"connect":2,"send":0,"wait":119,"receive":3,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.lobstr.co/static/landing/images/arrow-left.svg","fqdn":"static.lobstr.co","domain":"lobstr.co","tld":"co"},"ip":{"addr":"104.20.40.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lobstr.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 08:29:52 GMT","end":"Sat, 20 Jun 2026 09:29:39 GMT"},"fingerprint":{"sha1":"A9:B6:67:24:5B:28:CD:82:13:0A:DD:BE:D6:F1:9F:AC:4C:BA:A2:EA","sha256":"DA:92:B7:8E:5C:37:11:AE:42:04:CD:55:A0:52:67:E7:E8:F9:72:18:65:B8:22:D9:5B:71:50:0F:63:56:9E:6C"}}},"request":{"raw":"GET /static/landing/images/arrow-left.svg HTTP/1.1\r\nHost: static.lobstr.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 May 2026 19:36:59 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: br\r\nLast-Modified: Fri, 07 May 2021 10:41:40 GMT\r\netag: W/\"8f125ac76d0b34f6763012a981a1c751\"\r\nCache-Control: public, max-age=604800\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 7ccf992859ea6d03f90ce39bcc46049e.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: SCL51-P1\r\nX-Amz-Cf-Id: G1Og1slQHaxtWaabS3yV7RK6ZPcMiYYMUgJTifi8f-HtaaMuV2insA==\r\nAge: 250436\r\ncf-cache-status: HIT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9fc4983e9cb3712e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f125ac76d0b34f6763012a981a1c751","sha1":"c2f10e5e00664be517954371d336773d6a64f598","sha256":"ddb9df6a2b4be6ce26f3f2a27d4944deebdec7f0343693b4782b8d2dd5359352","sha512":"105a3ccb62f9bc4791f76b1fb966926cf6011e3597e679b79f21dd0a26758d39e5db92ad016885da47aa510e6b8578a827cc36537ae85a9889a97acaef7a43fc","ssdeep":"","tlshash":"3bc0c0f7416c7748cc9f42308a3ce8c521271079325800bdf3c0f91064058d39c139cc","first_seen":"2023-10-27T09:06:38Z","last_seen":"2026-05-15T19:37:38.930655Z","times_seen":13,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":267,"dns":51,"connect":3,"send":0,"wait":36,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/tangem.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/tangem.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1229\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/webp\r\netag: \"d76b7bb197a96f76982492c6dacc42aa4ba1eba4f4e42633af02dec908bb845a-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.290979,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1299x1299, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0d06947e0ae4be1f025d85555c73d303","sha1":"9cab82c47cdb2a31b19ac652facbd01add8393ca","sha256":"d8898cfca91046351a70e84fc44a6092b9b16907ce1b610667cc60d02541213f","sha512":"dc7ad5fe8a6be8841191d3a0a5f8e509eada047fa2298007fe0528c1b44ebc2547891369fbc4001f4e6cd6edea4d75d4b5b5fba2e18bf1a4d1b36869365e71d3","ssdeep":"","tlshash":"6f71104c6674291bd70c6bb40b0a82fb994c074fd173194e9b5b6bf58c4264d4f6c52d","first_seen":"2025-06-22T21:08:42.451971Z","last_seen":"2026-05-15T19:37:38.931514Z","times_seen":18,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/tonkeeper.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/tonkeeper.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3816\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"ffcb83a82c4e381060299e9e51aca57ba240105c42fc0d1f5dfe54ac3c9479d3\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.320243,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3816,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"089d8335dba7284f6ecbbebba8701493","sha1":"82bc1bd46964ba0157060fc773b7f85172f05270","sha256":"33af7eaaed71c16060da8f6b893b514fca17abf8279be01dd7ff8974dda5ad4d","sha512":"eeed0df708e257afd93084a70b1f72573b15479ebb9fb51a0ff0c3e2c3a31c2f53c4260491466346dcc9c26aa69b4779f09b7fb29f1ce2aaa85726403fab19ec","ssdeep":"","tlshash":"01716de8ad8ae64dc77458296f659ed088084f223be83fd42e56d411243147fb866591","first_seen":"2025-04-27T13:30:05.297443Z","last_seen":"2026-05-15T19:37:38.932467Z","times_seen":22,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/zerion.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/zerion.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2711\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/webp\r\netag: \"94dc625f6babc5a6059ba630e4d4a96c697a7f99a15ca75c38f32d8f4521d472-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.354953,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":2762,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5c89ff82dee2a99c7fd3d8c2572cadb","sha1":"f508f5771e1d44c1b018f9b76c0059bfaf661cfb","sha256":"cb9fb4000086474f84dcae9a54dd2862d09878bc505f1d4b5525755a5723eca9","sha512":"31523082b65f5b547ab82b5dd5d73d2f071e290feae31ec75ea17c6b782c11ca1d7bb8deb52f95e835238633815a5a0873baeb230a81370093cf389d97ede1d5","ssdeep":"","tlshash":"b4512bdb4924424eb25bccf13c049ec84487c46e91e91ee7e945264fbf7e0398eb57a4","first_seen":"2023-08-10T22:41:37Z","last_seen":"2026-05-15T19:37:38.933017Z","times_seen":272,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/safepal.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/safepal.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 686\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"68c5317e9c7dadab9e3ad1ba4f15399ff25b3a6a31b55bdab5c5b011b9034401-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.366410,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1316,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2cb21201bc6f986a95b7dbc9d348fb74","sha1":"313cf75db85f6cb94b25403bf264a104284e6816","sha256":"5e483df9391eaaa0a051e96c271102017da39f464196657e23c54427675f81c2","sha512":"8c00913bd8988159a6afcc5dd44eaada05899bcc1df5b38fce20dcf681c83a840d9149ae8d452d02aee4527d12188e6ddde1208e736348482c0179d429fbb22a","ssdeep":"","tlshash":"0921c852f2cc49f2bd8fc3da976819c5353e30e9315009d89245d3049e175d5455cddc","first_seen":"2024-09-19T20:57:03.499509Z","last_seen":"2026-06-10T18:40:19.400864Z","times_seen":42,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/bitkeep.jpg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/bitkeep.jpg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 11078\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"af0ad0f9b1dc35eb50fa59d8f250b84827b659b965451b7ee19143de7685a24e-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.412933,VS0,VE5\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12042,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"66d74cb438855098d4a61aec2aba71b6","sha1":"0dc06a5dd938feeeb96b0b649cafe65b80965a54","sha256":"795fbd7c08bf5ccf7e82dc12c7dd309d9da4b2aee2dab5e0a678f7ac4e17fa12","sha512":"dcf184f4f6784c65af565aea28834a0bf6600c86a799723cd0beb3c441d1e40b1336cd3c52a10050d20abbae3867c2f8778700ae6c6ce5564897ea44ffec5793","ssdeep":"192:DVLc50id6aj4jkeR7YjTq8iyrfgPyvfzDtphLig6IWVd73N6gjhmUiPMO/SbU+7g:N616aCkeRCriWzxphLigsX73AgjQnrYc","tlshash":"0042bfa77775a49be6a4fd78226fc514a3f228015c16ab2c123fa8730e0c34d1b029e7","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.820071Z","times_seen":656,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/right-arrow-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /right-arrow-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 145\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"798518d33a6b81926ca5c3be61cd8614041981b2fb4f49b1a73291a078dcb5db-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.156787,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":190,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8352a00a5f33830558bebd83d1204e5f","sha1":"469d1cbdac557d3f4dcdaa4d478da8f05e5c6c58","sha256":"1bfdd11a90a40ed6c09e15a598463fc3b8863a15217c7930777c34e18f46522f","sha512":"2e4e5612b4a6a1fe6ad70708210cec792f25c0888d105a64e10896e1a1d83312a955395fc7b35e276fcfcf698345b68fdd51941d376c8f68ff67b6554e20280b","ssdeep":"","tlshash":"1bc0c0fc50e4644c00088b30cb2c30cc154700ef438807d2f4501430214dad3e8079ed","first_seen":"2024-08-20T10:57:04.155716Z","last_seen":"2026-05-15T19:37:38.936008Z","times_seen":15,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/etherium-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /etherium-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 174\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"0cbf6c5f0502dae1031eee90f153a38e9159028588c72d24f639380359ec8cd6-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.169848,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e7be1de375d92a05d430c00418fa944","sha1":"6df97731c413b328417f8d7bf624ae1e969e8b9b","sha256":"3012f3c2f394ad17013c723c9b5715bdd5bd6032c4b223d92e4e3d6291d98ad5","sha512":"6128d8d1a47b1f84c08194bd3d26ee216475d5441c2128b815552b79f02d22de54ebd0ef4dc446b9231295c2bbbdcf99c98d45dbf2e79c0835796aa94b3f7474","ssdeep":"","tlshash":"51d0976c46bd6a4ca8527b70323cf2452843309082000988f7c0742148618af2800cd8","first_seen":"2024-08-20T10:57:04.194727Z","last_seen":"2026-05-15T19:37:38.937032Z","times_seen":15,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/exclude_for_safari.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /exclude_for_safari.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 141\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"5473aea3600a03c390ac8b027fb80b9078ea82500c435fd42e3d9f09631d715e-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.178617,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"8b7a51b520b8f7a5ebc184d4267dbc5f","sha1":"5f2eb2317293510ea0bd8570b0024b1365d83c8e","sha256":"d01e2f8811d326fcec7aef7d3b924b8520eefae72b662aaf91b7f4ee8e5db20b","sha512":"6f91d9ee54e49ecccfbc459d32fe2c011d4abac3baf1981f857bd6021b502b90aced6077df520e9f4a4c77d92a8f7f3ef286d5eeb8c12c88208ba7511b588b1e","ssdeep":"","tlshash":"f2d0231c49704d1503777797d545124d5c74c457dd1f4145357803d83cf50b10580e77","first_seen":"2025-07-03T21:44:10.486685Z","last_seen":"2026-07-10T08:45:29.46702Z","times_seen":5,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/bitget.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/bitget.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8138\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"4f9309ee90c6350d42f224aac0dd64b1c5a7c66d9cb7a3565b76a20b73a12ff0\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.356060,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8138,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5519d1bb44ae898324c7c0fffe58e61","sha1":"5a427be350806f64c0c7c584c034a90a7a76e8a7","sha256":"a0076a72ace42a8994b6f39ae775300b4376925d0ec764c888e4b54875be656e","sha512":"14fa54ad260d2575b2bbe5581c2965019351c88766347909302823aef3dc5dfbbf7b4d5a96c4fde900608ddbd90b06cdbb37d096ddbdcab954c69da356d3cd84","ssdeep":"192:YVk3lSz24ekkk+DN/67FehM5eOSRyrFDI9buIA31Hq/:h3lSz2z2eQKRqDI4IoK","tlshash":"97f1bfa0bafcc238583d494345712486bc5e8476edd3c3975640e46aa7b831f239a0df","first_seen":"2023-10-15T20:06:33Z","last_seen":"2026-05-15T19:37:38.944524Z","times_seen":242,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/wasabi.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/wasabi.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 230983\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"2b7a370543db49ebb12283209eea65b0a594764d585ebf3cff6b2d4018705020\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.382312,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":233297,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1400 x 1256, 8-bit/color RGBA, non-interlaced","md5":"0ae4cadaf910961a8cd7e9fe63f507ab","sha1":"e7136c80fb842ed7f84b1207066d3a8b5da2d977","sha256":"44334ab8d4ca9453c36160c2c2732cd72c3f6c1c63170120891bffe1b24de5cd","sha512":"5781b1a71ce6a4bfd6c6a8db5b2a2daa39502724b887a772e9c2581d7e89166f68d98a0fcdbc301806eab7b28cb5815fd35e79f555a0709eeb980469cb8c1443","ssdeep":"6144:zQHjEsyssagy+bqUCD1oVsIi6bbprSTVjbYnl:QjE5ssa18CZoVsIik4VbYl","tlshash":"0b34139ee6c841a6163c1b91ca37f0cc52d45acaf3c64c872b95ce86aa5c5fcd1e4e43","first_seen":"2024-09-19T20:57:03.536976Z","last_seen":"2026-06-10T18:40:19.314706Z","times_seen":52,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/visa-logo-color.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /visa-logo-color.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 553\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"4b857d8e564652c2fb38b7bb76c0e4fa4f0b69069b6570a88ac8f46b5c9d4c6b-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.136199,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1070,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a20b3a0e39a764f73d43620b95050fc","sha1":"48040d943996bd548fff4465708b30fa6c75370d","sha256":"66511e81d17b290b27b842bf730da1b95d8daee12f6c5f7cbd79afcbdaac2c1b","sha512":"ddd5adb30978c288943fdb7d682cc3f770a9bbdfd5cde3d6f368e322a151c4ba3394b348d14c05e0b0bf027f9064ac72adcf320fa3ef5e90db2c1caa3c9f946a","ssdeep":"","tlshash":"761172d213bca788cae7c21e8fae1106262770da991e46c0b1dfd604bb478d2f812c34","first_seen":"2024-08-20T10:57:04.149628Z","last_seen":"2026-07-10T08:45:29.435885Z","times_seen":15,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/bitcoin-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /bitcoin-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 505\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"4639150035fa35be4dea06292e2fc78676858ddf3fef59b6818f58483ac03aa8-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.157091,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":920,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c53601d8999565885fe726e9b47e18b4","sha1":"e71b01b3b7b9c7720efbb510ac4e9ef71697f453","sha256":"8367a0a8aa7789d62ec8e6a12a7e1b0b3f422941f1567c00f3729fef729b1586","sha512":"9e98fc203d6ba57a6cd10e17a29a969b54853287f12ad450906621d48491bcca1928ac1c1096cf76aa35c52f12dfe7470f4593ddf32a08a2de218f53af06e33c","ssdeep":"","tlshash":"b91184c2407096c8e8dac87cee13bcd82406b0e36b7d0cdee11a89199d47ec6b801c80","first_seen":"2024-08-20T10:57:04.15644Z","last_seen":"2026-05-15T19:37:38.952673Z","times_seen":15,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/owl.carousel.min.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /owl.carousel.min.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10156\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"4493b08d29b45aef8c65a17fa673b4e9bc348f31c2293e0c5e6932a0b058ab43-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.178601,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":44342,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-09T05:49:33.434932Z","times_seen":66914,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/main.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 518\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"0831dc95cc76704c1776829c43093a71412b36f641d1ec03c0cc694986370184-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.210023,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1916,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"55b46eac335e71a545dfde63f0260faa","sha1":"8c5c417776f0c060af6b63f298c5062cceb4167c","sha256":"ad3a2b74d824f2d47072b92101fafa0a6e4d0eb6e18e7cd674b51c22784f556c","sha512":"8fa5b9833869c2f4337852fc5e0c043fe9916bf326e1e9a6a031e7facdf72e9f478c75b08ee75d766d7ca21bc78364fb615feaf268695f9fb4ed5fdebbf7d031","ssdeep":"","tlshash":"95418c4df5b2167454bb36695fffc458b26e4007820cca01ffad06e14f9512ca597a9c","first_seen":"2025-05-05T16:39:57.203356Z","last_seen":"2026-05-15T19:37:38.954405Z","times_seen":8,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/output.6091837a4079.js","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /output.6091837a4079.js HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 454\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f4aa1f9562ed3c74ec0967ac5f5eaaf6f3f3b6142a0969e3d71a53e4305839bf-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.209769,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1458,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (904)","md5":"c62a25cdef07757e146cc6d9c52610cc","sha1":"61d2680233d8cab303b21310d90915ab43bf7d9f","sha256":"6091837a4079beea913424223e56b95ea4fd86e4f467e6d9a5a6d59331d8d690","sha512":"9d18273051836b911a6a71bb68c43fa36b45929d681e532d09383b5396a9cf3ff0f42023992dbcee3024ab01fde85dfe56137ccdbeceb956b89d5a8154a5c56b","ssdeep":"","tlshash":"13317a1db2023b3a1493925bd06f9e0868b75e518d05c01aeb7583ff1de9048f997778","first_seen":"2026-03-27T07:10:53.914057Z","last_seen":"2026-05-15T19:37:38.958128Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.lobstr.co/static/landing/images/manage-your-assets@2x.png","fqdn":"static.lobstr.co","domain":"lobstr.co","tld":"co"},"ip":{"addr":"104.20.40.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lobstr.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 08:29:52 GMT","end":"Sat, 20 Jun 2026 09:29:39 GMT"},"fingerprint":{"sha1":"A9:B6:67:24:5B:28:CD:82:13:0A:DD:BE:D6:F1:9F:AC:4C:BA:A2:EA","sha256":"DA:92:B7:8E:5C:37:11:AE:42:04:CD:55:A0:52:67:E7:E8:F9:72:18:65:B8:22:D9:5B:71:50:0F:63:56:9E:6C"}}},"request":{"raw":"GET /static/landing/images/manage-your-assets@2x.png HTTP/1.1\r\nHost: static.lobstr.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 May 2026 19:36:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 57153\r\nConnection: keep-alive\r\nCF-RAY: 9fc4983da93e8be6-OSL\r\nLast-Modified: Fri, 07 May 2021 10:41:40 GMT\r\netag: \"bb54b180a3e51bb1ac5ec33a3aef2107\"\r\nCache-Control: public, max-age=604800\r\nAccept-Ranges: bytes\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 43ef856f354a8f27601faed7d5395c74.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: MIA3-C5\r\nX-Amz-Cf-Id: DBRERmOFTimX9v8677t3WxQ30_F3I0Y7CN9YQFouru3gepbBtlB1Xg==\r\ncf-cache-status: HIT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":57153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 768, 8-bit/color RGBA, non-interlaced","md5":"bb54b180a3e51bb1ac5ec33a3aef2107","sha1":"97f371a47464999fda214f525e4ff8708e8010d1","sha256":"d316ef5d131e2759d1319fb355b12b647fad1b89c547cc412013b18dc7989771","sha512":"8818755e731aff901839234125b2390f03a86d35d1e9b235312d43c783a043030c92e1c0c3be0e51d95f85d9580d9e936f97c8b854ea344c3e2474f9b7549c63","ssdeep":"768:hanvmjTFkHzvusX1zr0qH0VsNaVYF7Zc+qFBPJTtpvco2IJ42ckUe2DM3vHa5:havmjTSHzR2SK8NHqFBBTtTD8tM3y5","tlshash":"1843ad60336014b867c49fe66b939de8e09d797ffcaf0594ab821b473567bee081840d","first_seen":"2023-10-27T09:06:38Z","last_seen":"2026-05-15T19:37:38.959067Z","times_seen":14,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":123,"dns":54,"connect":2,"send":0,"wait":66,"receive":27,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/keplr.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/keplr.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 30513\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"7a497e252580c4b8581c51702d4d82228110bf654dc43690634d0c1186994c06-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.321112,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":30723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"38b8ba202256987cda85147bb25ab417","sha1":"049c2878009253b689d85521a55930ed74509dde","sha256":"7151e633c00df49903171a10e1a8a82fb1a5e57d0813308f9b4446873cdba89f","sha512":"6604d373470ee4630767d2f3fb893a40ccf73f07be0490d47270420f863d83c4ce9c6ea64e2dc16c8486ead158de7ece3ac7ff1eb652b138bc75ec2de7bd6f3c","ssdeep":"768:+0pLgU0CUATYhacE/FWLSdJHNCzkpx+Qu:zpDNTYcFfzUkpx+Qu","tlshash":"d8d2e1390a0bfa45ebffdb84c0210aee523402c79fb3af1195a394c627670a99457387","first_seen":"2024-04-30T18:55:15Z","last_seen":"2026-07-10T17:06:27.265464Z","times_seen":114,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/crypto.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/crypto.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6544\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/webp\r\netag: \"6729c242ef0c20553e579f461008d68c4b509542715ae766eb36e5c6dfba5018-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.356048,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e667383cfc3d6d4933b68b657e719a92","sha1":"c5e2d898c4ea5f069885e0c851564c3f7071983b","sha256":"0e7e9d24d66960624aea3315eca48c0d38f3786cc55771d7e721a982b4eebc6b","sha512":"97195b8693738bebea98f70ea08325befe63d9daaa2a6b6ba755ca66be27c90ed4b5e25cd8ef09caaa37ffc5e8eef97ce5342d96be7f9238ed7173d91e50b701","ssdeep":"192:QUldjAKKEwKOVKM7uowrqfNl1CJti2Yz:1l9sKC37uowrql1Cn8","tlshash":"3dd18d90b1fde53fd2e822fa431897541d751024a63e673caa820e9de759246399e3c0","first_seen":"2023-08-08T08:44:18Z","last_seen":"2026-05-15T19:37:38.960637Z","times_seen":55,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/smart_banner.css","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /smart_banner.css HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1068\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"4a42e5da4256633924cf1472bf5c01fb4e15c31053be9a623c260b8e4ef00651-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.129600,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7477,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cc07c897600e4dabe7b905aef9b71ea5","sha1":"3f532b9d76056f696833d50bf0fd0d0c8925b230","sha256":"bf5a5766b59ff37a1d5a1182be3186fadfcb88179448fc9184a76723f0f4c60d","sha512":"189b95fb23c402121950b567b6f41b2c7d6aa455a2dd9a2074be13c333c307e4a649b2c61882aec7c5cab460544d5518b2b6954d70ad74121699a331703a6062","ssdeep":"192:zcdgOeCBlJ4tiFTOPEOYV4gsiPCo/ZgOFUjej+yWUyi6OQs:zcEJMFWe","tlshash":"8df1a996add301b07907a09f5b061e4d12d93c07d812c926bbfda28a9ffe49c90f974d","first_seen":"2025-07-03T21:44:10.546217Z","last_seen":"2026-07-10T08:45:29.459952Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/infinity-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /infinity-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 544\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"3003f6395e950107dddde1fce63131dcc5b5f4205bae646acdd0a835709a3aa5-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873819.157252,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"604a12b3a06fe9a8a513d3799488eaff","sha1":"33e37554cd3eb0f07c9431e0707029dbd24e7fb1","sha256":"ac54565e2c54e0fa6a478a7ed69ea4a2afba3a25433605ace9e8c699accb28eb","sha512":"99da06d1d4b73ee9f6a1c42f9c06328a1a236fed721e650fd6e51540b05d0f1ad3331968fc331e676f6466090601a65b721109883f01a8e263bd699419c28f69","ssdeep":"","tlshash":"143111d896f48863949b8bc8db60e0453d1d60c35df682c1b35eef4f1fe45c6090a7a4","first_seen":"2024-08-20T10:57:04.158208Z","last_seen":"2026-05-15T19:37:38.962494Z","times_seen":15,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/safe.webp","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/safe.webp HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3156\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"a0be466c71f157f18ccc6f451c0de0bd763b97e1e05a50c73eb469e9e8a6c6a6\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.329486,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"23bdc5d4e2a9a39faace5faa6f5404db","sha1":"8390639c7643779d6faf80c89cca0560b19ab4da","sha256":"c3d36c92885d987d0f2255b69eb4d3972bd04679a0ef3ce4395141b5f38658d7","sha512":"18dbd1c8464e9049ffe7cdc0f660cdcdf05e9cf8deb59355864a8db26bbc86e86210e89f021463182e2798acd02ff8f699e4dc7129f40a89dd0939a8b67aa81a","ssdeep":"","tlshash":"ae512cfc1503a96f24d16276507d28eccc4ba777aa5e20585d1b9707b0fb0a7376d710","first_seen":"2023-10-15T23:58:17Z","last_seen":"2026-05-15T19:37:38.963343Z","times_seen":32,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/near.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/near.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 674\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"ffc1d03d9a77ec070b508c838fd37151a594ab30a88dacedc608f0c898e4a40c-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.377825,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 4-bit colormap, non-interlaced","md5":"c838964414506cf816076cb9299f1eec","sha1":"75829a0015e9637917d592d59183970c6575180c","sha256":"189c5f14f9cfce095721d5e3816e0aab32d28bd3c28bae61d01af92687a2f94f","sha512":"7bbbee7c7e9f4231a2dedf762cab658473f775bb6f799797af7e97d68f4001d29275b46c3d7f9755d44a1f04af06ea9d9a23117b976f4bff0416cefd4318c95f","ssdeep":"","tlshash":"760123bbced81ebee4d9c17d593611b4e970114239a2ad7adf631430643d890b069790","first_seen":"2024-09-19T20:57:03.519719Z","last_seen":"2026-06-10T18:40:19.391783Z","times_seen":46,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/bitbox.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/bitbox.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3282\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"e9f9672ecda2bbdf044997531f3b1dcd1a87905786ea2c9b7cdb2abaf12ac296-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.412540,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"a12944c8db0cb3125adab5db3972b7c3","sha1":"1c2b4c3be601ed31c48b98765299a8256a356aa5","sha256":"5b95e564df75d51613f05ac8c13dea2a80ccbdb63d7cc5ca2ce356b80aa5fabb","sha512":"e3492243acde054d4f86012d36f5e0276c15951fe3eebca89e4533255acd49958b67815d4e1ff3cba265b2a8e3b09a4e1f1e051ece1ef8219c2bc6da42c5f1fe","ssdeep":"","tlshash":"bc710865a3fa0d6acc41924f97e026370f16460a1a372e6d970f738ac9b0bf43351158","first_seen":"2024-09-19T20:57:03.540922Z","last_seen":"2026-06-10T18:40:19.409061Z","times_seen":52,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/dcent.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/dcent.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 23966\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"45fbfc7bc7c6bb46e8f4c04a4724dd3c18906351bfad568474fb19753ca926aa-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.413153,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"a3e96bd10593d09821cf346273b4f48b","sha1":"b52c613e32bc28b1da33245cbbfa78bf0dc8cf67","sha256":"0390160ace16eb7bdb64a8e7734ae21eb02aceed3f60eeaf726d811a1571c43d","sha512":"3b6178b86c72ede0354d8194001e03c892328011f768cfc9697d61dcc01736a12fdadaa3c9453033c1c62b4b5400650e9d9c315cc4c8347130fbd4357f551ebe","ssdeep":"768:G+ynoX/X/yRWC1AAxyT1Di55TK9HdH4u6a:3ynIv/KCFij8HT6a","tlshash":"19b2d1d52ef6c006ddbafc39017b9fafa1134673d4d43190965c844c99bae234728ae1","first_seen":"2024-09-19T20:57:03.544868Z","last_seen":"2026-07-10T17:06:27.285542Z","times_seen":66,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/safe-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /safe-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 863\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"b47ee0abdcd214f2bc4507128ce88a2b28c2bc10091dc173cbbeea3eb6bd0f53-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 4\r\nx-timer: S1778873819.153861,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1853,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44da4ab79688e1db4c4a2e7a19aa9424","sha1":"406d395c1b9af64717137cf6b7fc058dc7cbb526","sha256":"0136083bb24137d3721013504ace7fa5f5979b045c39d68886e16bb459bb173f","sha512":"03ed457c0309c16a2affbba69fb9a127775258ab9be9a393625aa93cfed4c6f43ce4e84679981537c990680e05b9f9c8165987586066a2f9f8eb704b42f3ce68","ssdeep":"","tlshash":"ae3122b249bc10aca4875f2adb30d485371e38bf326f8a85621ddbb0064399edc07c58","first_seen":"2024-08-20T10:57:04.175924Z","last_seen":"2026-05-15T19:37:38.966474Z","times_seen":15,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/assets@2x-mob.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /assets@2x-mob.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 22065\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"f7788f77acc249605e733c0be218ce4f389d956da04810974a8933e394ea7cb0\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.156764,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":23169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 416 x 326, 8-bit/color RGBA, non-interlaced","md5":"dee75bf9366e8390c2189c874fde6a53","sha1":"2fdd2aa75cb84d84dee32969d401379c1ceb3cf0","sha256":"b0a789b8f5adabcbdabd3aa92760232efa4d37147df69c58fe12f72e5ebda8cf","sha512":"6a9d7ede0b670a24aa02fc9ac23adc31b9ce28985bec90cb70c78e6956f41841104c55744a3b5dbd8ead393976b09afefa64e197506858d71141535378aca057","ssdeep":"384:4E65azw1xaUxAH7PAwz6kYIoJwumQSljaxLOwQzUBx906u5JPAGStIdYY4foozNl:+as14H7IkVoIQYANhx9bu5vA9NRb5r6M","tlshash":"94a2e18135681c35bd477e5d2a774736b4d08aa69ac85b30cf283772390f4db7d878a2","first_seen":"2024-08-20T10:57:04.18754Z","last_seen":"2026-05-15T19:37:38.9674Z","times_seen":15,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/star.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /star.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 191\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"c3c1067c155d6c2b07834009528e72d69c3d76532ee55e5a48b9ccce43dab306-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.169757,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":280,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80526029d3d7641e2bef2c5e8c14c74d","sha1":"f03e7b7904c98a94a898d8949c5e7c650c57a16e","sha256":"b8dd357149f9fe6316b963f13f22655e87597f1a1c3ba6ec5445ac3cd1d45adf","sha512":"cbdd5a9174f5456ccef2d6646631159c1e0388bee88ed70e42b83fb2446ef82ed7e22d5156698bfdabdab8379ca0113ab59783c194472acb864ceffd056f8e1e","ssdeep":"","tlshash":"3cd0eb5cd10cc630ce19cbe0b23ce0921be3a1f90adc801ccbc332a0a2d508b3c1a9e5","first_seen":"2025-04-17T19:58:03.161771Z","last_seen":"2026-05-15T19:37:38.968217Z","times_seen":8,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/footer-logo.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /footer-logo.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 989\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"ebda884f87163acd7ea86c6f0dcbb2e3580f566d6c96bc88bc1b217731504dc4-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.171926,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":2035,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b2d84367f6b3f9f2d3a420a64366c2b","sha1":"19410c7362c07a0f6b3c8f2ad29b89485658b7df","sha256":"e8c5cb83c0a3336ef2008fccb01237b6bbe9b6cc6b0b9a338664356290994c14","sha512":"d9c8961a0e2d1056b26a26700cf35c60b88d0644920735e675f50200c4a1e238368a0aceda75b7ee87518969a54c93ea24e32ee83be0bf1a7308ae17d3b46334","ssdeep":"","tlshash":"8c4187d55fb462bc99cbcf17ff241449791b54fe36618a04a309aeb46f076d4f400c54","first_seen":"2025-07-03T21:44:10.508522Z","last_seen":"2026-05-15T19:37:38.96876Z","times_seen":5,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/i-os-badge.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /i-os-badge.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 4253\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"55ff52e0cace976c5f2b47146811f758c37ec0c5f99fad9d5a3eae1cdc124333-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.172000,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":14151,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47e252d6731a84b1ec492506fefbd01f","sha1":"d1eb83dc0e8189173cf90dace8dd3feecfd59a9f","sha256":"a2512e64b8828408276341b9224d61557822122821f814a09dd0108c53b1a77d","sha512":"41a5d47442b44f4b01f0efdc78d3e2ab23f0ce525d150c55ca6225bf4e189f7a263106651b76570f308581b5f0d22ba29c57e96fe167a236f8fab71e25f077ab","ssdeep":"192:HDwPtlO4vZCyPWUYIlQPz64ScKSDNA4HDonGNJyTAh6lTJjFQKA7YeIfltUYzbp8:EPq4vZKUnO6pc1UwouI944q","tlshash":"8b52fbd513b0c7f8bb8ac35c9d3655923d3a34ae75f382d4f55d6a29af038c405a8863","first_seen":"2024-08-20T10:57:04.189239Z","last_seen":"2026-05-15T19:37:38.969679Z","times_seen":14,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.lobstr.co/static/landing/images/arrow-right.svg","fqdn":"static.lobstr.co","domain":"lobstr.co","tld":"co"},"ip":{"addr":"104.20.40.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lobstr.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 08:29:52 GMT","end":"Sat, 20 Jun 2026 09:29:39 GMT"},"fingerprint":{"sha1":"A9:B6:67:24:5B:28:CD:82:13:0A:DD:BE:D6:F1:9F:AC:4C:BA:A2:EA","sha256":"DA:92:B7:8E:5C:37:11:AE:42:04:CD:55:A0:52:67:E7:E8:F9:72:18:65:B8:22:D9:5B:71:50:0F:63:56:9E:6C"}}},"request":{"raw":"GET /static/landing/images/arrow-right.svg HTTP/1.1\r\nHost: static.lobstr.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 May 2026 19:37:00 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: br\r\nLast-Modified: Fri, 07 May 2021 10:41:40 GMT\r\netag: W/\"9d4bb5effe7fee77afa91b9b10eaf214\"\r\nCache-Control: public, max-age=604800\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 d2cdcf1a98ceb3b0857d4fdb2170d97e.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: BOM78-P7\r\nX-Amz-Cf-Id: 94Ludbq2CpLSohdc2_bfyXMmvPFkk3RJ-xb6XGkAYAr2M5wo6rHd-Q==\r\ncf-cache-status: HIT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9fc4983dfca4723c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":183,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d4bb5effe7fee77afa91b9b10eaf214","sha1":"e4e90ddd9ac66296c87529a5e5da507c53ca0f94","sha256":"13b5cf7111c3b02f9df36706760a60913b6e8168de6ab77985c34c91e48fc4d1","sha512":"e52ef02316eda138c2fe153c5c5dfd560917d68dc8b687895c7d4ad6aa5723dc130dc4596f1c91acf213e1ad65e929567e4330fc7c6a1122c4736e3db1a20fc8","ssdeep":"","tlshash":"46c0c0f5926cb5048c494530c22c22c0233314b1024400edf2c1f700d801edba8066cc","first_seen":"2023-10-27T09:06:38Z","last_seen":"2026-05-15T19:37:38.970691Z","times_seen":13,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.lobstr.co/static/landing/animations/map_anim/map.json","fqdn":"static.lobstr.co","domain":"lobstr.co","tld":"co"},"ip":{"addr":"104.20.40.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lobstr.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 08:29:52 GMT","end":"Sat, 20 Jun 2026 09:29:39 GMT"},"fingerprint":{"sha1":"A9:B6:67:24:5B:28:CD:82:13:0A:DD:BE:D6:F1:9F:AC:4C:BA:A2:EA","sha256":"DA:92:B7:8E:5C:37:11:AE:42:04:CD:55:A0:52:67:E7:E8:F9:72:18:65:B8:22:D9:5B:71:50:0F:63:56:9E:6C"}}},"request":{"raw":"GET /static/landing/animations/map_anim/map.json HTTP/1.1\r\nHost: static.lobstr.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lobstrsupport.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 May 2026 19:37:00 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: br\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Max-Age: 3000\r\nLast-Modified: Fri, 07 May 2021 10:41:42 GMT\r\nETag: W/\"8dc745926307d32a487797f0d7faec92\"\r\nCache-Control: public, max-age=604800\r\nVary: Origin\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 014a11ebf8efb524b8c418cda7b185d6.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P3\r\nX-Amz-Cf-Id: d5xF38OitnzY0KgKRRs6moiTHYFbF0dHiTJWdFLXu50qU3hPfgtwMQ==\r\nAge: 37158\r\ncf-cache-status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 9fc498400f5e120a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":611177,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"9269c64de0d7f1ce8e4992a2daaff770","sha1":"d691a0d1db47dc1e87f6b7b76ff1ed060a9f0acd","sha256":"642faa224bbbd315478c769c94a4e75a92f8b11c872aa6e57c2bd23b37d1f6f4","sha512":"a9733c5388149519b91c643d8558e96c1f7151d7e7563f5f711e2b97d478cc446d73e1c74f4047b20308d73bd1fb25a2d634c756c3422af77d12cffd720751df","ssdeep":"1536:pqc/beJbxmW0m2Oyz+53xyk961kJ1JljRi0//3xQ:pqc/beJNmVm2Oyzaxyk961kfTjRp33xQ","tlshash":"46d47d4503b10adceb4a2ec0c64371d5dfc44d56efc154edeabd9e249aeaa6d2301e13","first_seen":"2025-04-17T19:58:03.166845Z","last_seen":"2026-05-15T19:37:38.971742Z","times_seen":13,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":57,"dns":1,"connect":5,"send":0,"wait":141,"receive":13,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/chrome-web-store.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /chrome-web-store.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8098\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"3fe9d3568fb8a55f7ab11abf17cf5efaca7a1a3663b91c12acd583307d40924c-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873819.140764,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33dcc7b2918672a254abb6e4d3c6c133","sha1":"7936bf800f057e8f11fea42580fd377174810a69","sha256":"53f143e54de751731e4762a602572ce9587f44081be956b62ef53453397f31ce","sha512":"d8a858597c5e8885579c9ede2a6a2b4a230b0f3e259ccea5c46b41e764fe1600a9d26854dac96fc60d726ef8cf6a6b06918f65562c7029cdf844d85ba574ebb7","ssdeep":"384:OXfHPCHUzIWQ2RRYSGEZ7PRFV2X/QjgZ/LTeZyttu2SeL2tvtNqBrQeoz6ee6CoM:OXfvsGQ2RRRGaLRFuIjWjpBSe0qB2xa","tlshash":"11f2b7d557f851d8d041f3fc862a596a3b58afeab301c4aaf7ac0c569bd506d8c81cc3","first_seen":"2026-03-27T07:10:53.934327Z","last_seen":"2026-05-15T19:37:38.972839Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/simple-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /simple-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 961\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"4454f628ebebeeb42d0d2946f4c4dc85dfa7b85e9fd863b5c15ba0307e70c75d-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.153624,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":2526,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e2526a8f147881ce37d8099873c288d","sha1":"fb9ef2ed21e61fa2d05c1ccb14fe1e1d9c8cb8c6","sha256":"a2d161fe0ceac41ec5d799af463ac8ccf205b31016a9e2823a22af6e4d2c1f42","sha512":"55734b4a8a37539ade66bb5896ef5394bc57daa81ecb0e458f5be66d9296c897ea836bc7fd9eb35f99fbda1189aa618e9e039d6af5c16ba213d78e119be504af","ssdeep":"","tlshash":"1e51b685b3f6c7e1a001e5fe977db0ea37262dc56423806013aa2e28f94247dcdd6192","first_seen":"2024-08-20T10:57:04.176705Z","last_seen":"2026-05-15T19:37:38.974335Z","times_seen":15,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/swell.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/swell.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 676\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"af9f53626de70eb7ec6edac60efd40d4d0f7396871d7ed1c65f09385881998a9-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.323609,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1320,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c09371321dbeea6742570c88cbb9acc","sha1":"e747f634073e11923aa6b395e19ec6cf25f5ed6c","sha256":"1df0f979aeb4a25c9044ba08733c418ac77bc28ea1ae40666217065e051a200d","sha512":"c21da342d5c405bca7ad3f81c223a0ee808ca3ebc9bba0b7979e1f21a7091b1164571c0333f6a864429e6beb328d4bd8087c6e77fd84d1d74e78b60fc7c005b1","ssdeep":"","tlshash":"f02150bde3d1d15ee708e7fc8a01583c215710d2bac2c466d0e0ae1845a60dd246ded3","first_seen":"2024-10-17T17:48:04.014403Z","last_seen":"2026-05-15T19:37:38.97821Z","times_seen":23,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/optimism.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/optimism.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 64238\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"277f975a3d02f2f16d8c660c40b8d2013585fb6714f93f4e48cdec999004a06f-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.325206,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":73391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"6af9c1b5f2343b7e326111a5333dd644","sha1":"4f26997c993e11669528832115692d8c0b95f2e0","sha256":"c95023993e5fce039a81e01256e1e88e753465ebf5d844d090432fed6678f009","sha512":"6b655058b46e27636ad80891969bae6ebf5e8da274473b30271ed6affd4770bd59a5af21f2a2e56f5f402937be800d9b48a9eac757eb5b59d004d100589816ed","ssdeep":"1536:MH2QvbXEN0xSeU+B/+riPeq7p+jRnNB+aZ61+S1LE3:MPbX40xSeU9GeqA9NhQHZm","tlshash":"3a73e0665993cee0d0a002beacbd4fc9bf55263cc4591fd24bb8f2354e8e09511278ed","first_seen":"2023-06-22T14:21:30Z","last_seen":"2026-06-05T20:39:27.021022Z","times_seen":61,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/iphone_x_main_v2.jpg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /iphone_x_main_v2.jpg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 101292\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"5c31ef1f875a3492ea6bffb994cd2c85928008a81af9336f2f7083614427747a-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.143802,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156907,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, software=GIMP 2.10.22, datetime=2021:05:14 20:21:48], progressive, precision 8, 1170x2532, components 3","md5":"8c585b55fc98553566e1ede6a9370272","sha1":"e1c22c8201b6cee7923e5a113c6fb8a8c33808bc","sha256":"047ed758edbbe8b0da6fe15e486c4eb51da41e82033b17dce87248bf9b486409","sha512":"ea3ab3fd410de9377af4ad2a3b57b0f05903cbdadaf1a161b016c37ebb1f52933b22f8be9755d6ade60df01e01da56bfb47fbcf4f0da813d26a2b539a162eace","ssdeep":"1536:t5yMul8Lza0LkDtbnuw18Vz2YgjZBzoNu2aoTbg1s8re+/5nC9ZpCk3g4783HOxR:Dkl9lJuH5q8uRoYu810//","tlshash":"78e3adbd8ce54c81c8ce5f3542362931a96f2d74c7df89a973cecda07b34e60994186a","first_seen":"2023-10-27T09:06:38Z","last_seen":"2026-05-15T19:37:38.985423Z","times_seen":15,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/New%20landing%20video%20Apr%202024.mp4","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /New%20landing%20video%20Apr%202024.mp4 HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=12451840-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 40256\r\ncache-control: max-age=3600\r\ncontent-type: video/mp4\r\netag: \"e86d2a414bd456e1eea4262641001e9090a7467c61227e6a38843ee0c6d9af8e\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-range: bytes 12451840-12492095/12492096\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.776663,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":40256,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"cee887208cc2f7f5c8ff31c4dee07b12","sha1":"a92eee33a60a82cdf64d2bc8bb1514fba940b679","sha256":"60bfeaacd79951a1d9e3bbf6d780e2a56e38c40e0f6dd3b544f9d8cb8283ee0e","sha512":"ac6709ec9716710344002b48a9ca1ba781dc9f2d7a4bc0e663f597c8bc3134c735ea007066f824307da686a60294f33126e774ecdde87f8add4dc2cdb7847624","ssdeep":"768:1kqfvzkfwsi3P9mi0+3reF4u/j4eZC40yzR:1kqGifRr3rNH40yzR","tlshash":"64034892b738525bca507bb4a6e5c3c53b71e5a01343d2ef9244275acca3fd49b422dc","first_seen":"2026-03-27T07:10:53.948716Z","last_seen":"2026-05-15T19:37:38.986326Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/lobstr.jpg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/lobstr.jpg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5456\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"ba9baa1afa70994baec94e64d65c028fefc546e4beff18d187f8cd7c5b47bb33-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873820.291108,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8638,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"b85468576aa50863b53cfee17d7fc038","sha1":"5dd9b07e4418b15f6d1a44679a6ef0117874b0e8","sha256":"9642079049a20b839e86860c61eec2e956a09107c7a06da75b242160f77f81df","sha512":"00acc7e2b43a4387435d3a17ae0c449a898ff64d617fdd1122256d91225953d4d8e9d0ff2784f259bcfbfcef37003671fc4c0bea6b8984b4cacba03ea66367b3","ssdeep":"96:ghSEyhZLQMOzG3y6v5oMskzrTX87GBG1/JIjY8+xSrDCrRAEGuPv8X7+hnhHYhFW:mS7ZLA8d5oMsgrz7u/J/yDmRAEn2zmF","tlshash":"7e02a71befe357039b1a86fcfb022cb90b7a6b1575c57be215668ee725108210ed311c","first_seen":"2025-06-22T21:08:42.375495Z","last_seen":"2026-07-10T17:06:27.287547Z","times_seen":40,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/others/asset/img/leap.png","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:37:00.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /others/asset/img/leap.png HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3529\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"b652ad7aa4a0635354e38168d319216e22943724286b4ae7ae8a44178b279ef8-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:37:00 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778873820.363434,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3555,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"97747085964f2c70543ad84504c19a4d","sha1":"18973266d24bbc24d74e6190585dcef96e59356c","sha256":"7595de78ebe458954f25854caaf6dccdc0cb5042ec3833c0efc9ba57571ca8b0","sha512":"a26fc2192590a8040cfee310aaf16c183914babb5b19565c4468844124252b34a457eb0bc578a4f72b7bc722df4d4b028529b465d69fc60a33d3b8ad486c566e","ssdeep":"","tlshash":"e9717d9140df76b8a239372723c86ec0d0ad986cfebf781086874faee153c581416a03","first_seen":"2024-09-19T20:57:03.493859Z","last_seen":"2026-06-10T18:40:19.390432Z","times_seen":51,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/telegram-icon.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /telegram-icon.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 182\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"8423efd7b640fe7ddcca1b8a5f4235bf0c887e175999308a7d8c29d6440df468-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 4\r\nx-timer: S1778873819.168637,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d27545d1312bf9a2a95dabe84732f578","sha1":"7ff8c06353c13111651b746fc201e14b17c3b5b3","sha256":"2bb3e648792348ce0907b2b9183a1d50d5d952a576e624fb9db82b17892f0b1d","sha512":"7668465a727a13298758d7f9b245bd2fdf41298546003990c703cb9d81e1e93127124250ede7100978f634b821c20c5263907017c8739a9f1e6f41ab10c81541","ssdeep":"","tlshash":"abd097fa6228c810824ac338a3646d81a88bb0a80398098072a0377b3e509e37800df8","first_seen":"2024-08-20T10:57:04.179392Z","last_seen":"2026-05-15T19:37:38.988635Z","times_seen":15,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobstrsupport.web.app/twitter.svg","fqdn":"lobstrsupport.web.app","domain":"lobstrsupport.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobstrsupport.web.app/","date":"2026-05-15T19:36:59.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /twitter.svg HTTP/1.1\r\nHost: lobstrsupport.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lobstrsupport.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 380\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"bd5572f3790e23cec6d510e1e5f7e75d9ef5864beb6015111b4f661fdcaf7cbd-br\"\r\nlast-modified: Wed, 13 May 2026 14:52:16 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Fri, 15 May 2026 19:36:59 GMT\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778873819.171680,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":684,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22fed1f35ed164b0a9a22a84187b7ffb","sha1":"7f7c1a6552463697cb2b44a66937ec4f08324f89","sha256":"f9acaab3dba20365de6023008266fa60be9574cd113bd4914d9a4008156b5e26","sha512":"13836310df8ff06576b6477cb3d7252c2f7f1cfbd9e1c01a577e24e87b08b9691fc806434b41275e2f8a1574cd78fd76086234aab2a8528196fdec15292feded","ssdeep":"","tlshash":"a801fefd207ca9ccc6829961bb3850a8430e28b2762900c99f5e8f72518b5e0df4be04","first_seen":"2024-08-20T10:57:04.192452Z","last_seen":"2026-05-15T19:37:38.990477Z","times_seen":15,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lobstrsupport.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}