{"report_id":"74765d5a-eaa6-432c-897e-fa34758fb07f","version":0,"status":"done","tags":[],"date":"2026-06-20T12:33:25Z","url":{"schema":"http","addr":"paybonuscooudmae.lovable.app","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":0,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"title":"TikTok","dom":{"size":2416,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2416), with no line terminators","md5":"76d4916617d2ce7385fdc8f65491fe5a","sha1":"034b143a24bcecbcf8dbe6b0de8837dbe72169f6","sha256":"07d5aa94d4e2d44854e868b697f4538c2e64f8ee16b667895cb62b1178a7ba37","sha512":"5e27034dccc3850eb2cad9f3af84d84f47ec0c46f7cbfa93bbc13239e4089d50d36d596e63e5be659495c51914a6e39798c4755a335a1239acb591843018c4a4","ssdeep":"","tlshash":"744177e3ee249c0b119549f0d806f0c8c475f21fc5e64d94f6d8629e15e1fd486eb552","dom_hash":"domhash5078d4644dcc3e7e29adf6681853611a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"paybonuscooudmae.lovable.app","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":0,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-25T12:33:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"paybonuscooudmae.lovable.app","ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-20T12:28:34.81174Z","last_seen":"2026-06-20T12:28:34.811741Z","alert_count":48,"request_count":16,"received_data":657869,"sent_data":9273,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/assets/index-XjU9clZs.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3569fba9d64ee312955f77376a93e5d1","sha1":"b835761f36a00e845d6bf1af1b7779ff0a28290b","sha256":"39bc0bd4f59eb50b1e4c71789cb95d3f2022b9681949479d70690c2a4df77d7d","sha512":"f8c581968ecd532b5620154fb0b693d1206bbadeb72c488057f99e2bc249130bd7ab2029d1d4e032369701f9f5dd0d7942f03427ba445b009633a86fcd6f5c4f","ssdeep":"","tlshash":"ebc0c017100c31b704104400e3ed5c0265738031379d8701d230034b63710d4603cbf0","size":179,"data":"","first_seen":"2026-06-20T12:33:27.434036Z","last_seen":"2026-06-20T14:06:08.484771Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/__l5e/events.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4984c751409f378613ce4a697469eb54","sha1":"db702076417754abd5497526bb2d4326d3fc9594","sha256":"48b09309d5c937dcd3d62ffd10b47d9d4ed5926f6b96cdcdefa63099e84818fa","sha512":"32420a4ba8bc56dadddd982b9bb39cd56fc15249f7a6962f0f606a84681be20e5006554354eb317c0b5f44fa495a08a5ccffb42abbd8bdeeb4febb6530d6e393","ssdeep":"768:5+rVEje/DCjA89Huk/sk4S58W45XKxNAOtXVltoaSeSzc4R4jgcFykJ8X/cpCgAd:5buk/sk4S6etgYrXBfOVEkZovhfi7","tlshash":"aa13728878f714a30163917e5b9b810236349587354adfa4beac4d0a2fcd658e6f3fc9","size":44148,"data":"","first_seen":"2026-06-16T13:38:26.366748Z","last_seen":"2026-06-28T12:14:29.567384Z","times_seen":1100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/index.html","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e4fe1e48d8963045b15a9a3b6f4877d","sha1":"596451b5c9924d835a1bcf2c084eed87cd1e7d5a","sha256":"46c0a7212e5c9732c3fd82d155e4cab8240e750c70aa5f133c0e0301afe6bd68","sha512":"dec5fbca77533e2452b8424aa80bba6aee7ccc0b54253478d236b61a07bcc48ec495c6955f9b7a124e1174378a6429f61500c4e18026743712ce8a33fc645894","ssdeep":"","tlshash":"6821440c36a2242c9b7d6da1662fb308a22e04035c44dc80f11de4692f23d6bc4c3a7f","size":1227,"data":"","first_seen":"2026-06-20T12:33:27.437563Z","last_seen":"2026-06-20T14:06:08.491968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/index.html","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"abc047b6d2dd6efc8570084c6a1b26bd","sha1":"4c911cb98475028f78b82a4abfef4e3a0473c855","sha256":"640a76a2b1f8aa42e1036926ce2f55ea41c627233eff3c552233b1275434878b","sha512":"f34eb54f238b5c86726c9a43454f4da1a8517f542b7b957737ab56bb8cb491a4c09524de9ae697225fc87ea3cd137345c2bac3822c3a8c8c80bc652a17970322","ssdeep":"","tlshash":"6cb01218406150273224441001381a5ca3b9d34031f4c110368cdc3187ef06d2692258","size":99,"data":"","first_seen":"2026-06-20T12:33:27.438265Z","last_seen":"2026-06-20T14:06:08.493624Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/index.html","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f5c63a3695b7f5a60eb93b11e285882","sha1":"b7e0c01a68256c6d94e144a3fb478b5f2608f2a0","sha256":"f360086068d81bee5f6596fddde41594a022a51320fc9a94aa3f84f81e482601","sha512":"f71b6e13290cca0bdfe77438c934f0ccd306e66f597210b2701cead7432ea573e98210548f92aaf645938aa6afe15516b3a81a00e79389a296667ebba1c72f23","ssdeep":"","tlshash":"2d81ff0a2bf30535806be5ab4fdb6648d22290133d43dd5d7e4dc2088fc5a5aa5edba8","size":3957,"data":"","first_seen":"2026-06-20T12:33:27.439179Z","last_seen":"2026-06-20T14:06:08.494779Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/index.html","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e4fe1e48d8963045b15a9a3b6f4877d","sha1":"596451b5c9924d835a1bcf2c084eed87cd1e7d5a","sha256":"46c0a7212e5c9732c3fd82d155e4cab8240e750c70aa5f133c0e0301afe6bd68","sha512":"dec5fbca77533e2452b8424aa80bba6aee7ccc0b54253478d236b61a07bcc48ec495c6955f9b7a124e1174378a6429f61500c4e18026743712ce8a33fc645894","ssdeep":"","tlshash":"6821440c36a2242c9b7d6da1662fb308a22e04035c44dc80f11de4692f23d6bc4c3a7f","size":1227,"data":"","first_seen":"2026-06-20T12:33:27.437563Z","last_seen":"2026-06-20T14:06:08.491968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/index.html","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"abc047b6d2dd6efc8570084c6a1b26bd","sha1":"4c911cb98475028f78b82a4abfef4e3a0473c855","sha256":"640a76a2b1f8aa42e1036926ce2f55ea41c627233eff3c552233b1275434878b","sha512":"f34eb54f238b5c86726c9a43454f4da1a8517f542b7b957737ab56bb8cb491a4c09524de9ae697225fc87ea3cd137345c2bac3822c3a8c8c80bc652a17970322","ssdeep":"","tlshash":"6cb01218406150273224441001381a5ca3b9d34031f4c110368cdc3187ef06d2692258","size":99,"data":"","first_seen":"2026-06-20T12:33:27.438265Z","last_seen":"2026-06-20T14:06:08.493624Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/index.html","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f5c63a3695b7f5a60eb93b11e285882","sha1":"b7e0c01a68256c6d94e144a3fb478b5f2608f2a0","sha256":"f360086068d81bee5f6596fddde41594a022a51320fc9a94aa3f84f81e482601","sha512":"f71b6e13290cca0bdfe77438c934f0ccd306e66f597210b2701cead7432ea573e98210548f92aaf645938aa6afe15516b3a81a00e79389a296667ebba1c72f23","ssdeep":"","tlshash":"2d81ff0a2bf30535806be5ab4fdb6648d22290133d43dd5d7e4dc2088fc5a5aa5edba8","size":3957,"data":"","first_seen":"2026-06-20T12:33:27.439179Z","last_seen":"2026-06-20T14:06:08.494779Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/index.html","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e4fe1e48d8963045b15a9a3b6f4877d","sha1":"596451b5c9924d835a1bcf2c084eed87cd1e7d5a","sha256":"46c0a7212e5c9732c3fd82d155e4cab8240e750c70aa5f133c0e0301afe6bd68","sha512":"dec5fbca77533e2452b8424aa80bba6aee7ccc0b54253478d236b61a07bcc48ec495c6955f9b7a124e1174378a6429f61500c4e18026743712ce8a33fc645894","ssdeep":"","tlshash":"6821440c36a2242c9b7d6da1662fb308a22e04035c44dc80f11de4692f23d6bc4c3a7f","size":1227,"data":"","first_seen":"2026-06-20T12:33:27.437563Z","last_seen":"2026-06-20T14:06:08.491968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/index.html","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"abc047b6d2dd6efc8570084c6a1b26bd","sha1":"4c911cb98475028f78b82a4abfef4e3a0473c855","sha256":"640a76a2b1f8aa42e1036926ce2f55ea41c627233eff3c552233b1275434878b","sha512":"f34eb54f238b5c86726c9a43454f4da1a8517f542b7b957737ab56bb8cb491a4c09524de9ae697225fc87ea3cd137345c2bac3822c3a8c8c80bc652a17970322","ssdeep":"","tlshash":"6cb01218406150273224441001381a5ca3b9d34031f4c110368cdc3187ef06d2692258","size":99,"data":"","first_seen":"2026-06-20T12:33:27.438265Z","last_seen":"2026-06-20T14:06:08.493624Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/index.html","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f5c63a3695b7f5a60eb93b11e285882","sha1":"b7e0c01a68256c6d94e144a3fb478b5f2608f2a0","sha256":"f360086068d81bee5f6596fddde41594a022a51320fc9a94aa3f84f81e482601","sha512":"f71b6e13290cca0bdfe77438c934f0ccd306e66f597210b2701cead7432ea573e98210548f92aaf645938aa6afe15516b3a81a00e79389a296667ebba1c72f23","ssdeep":"","tlshash":"2d81ff0a2bf30535806be5ab4fdb6648d22290133d43dd5d7e4dc2088fc5a5aa5edba8","size":3957,"data":"","first_seen":"2026-06-20T12:33:27.439179Z","last_seen":"2026-06-20T14:06:08.494779Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/assets/index-DWNf5Suv.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f78a14d10c195812a703a2582a07f6a5","sha1":"b61a45bd7acba051eb4ee052c3e765433c3ab2ca","sha256":"d498edfb325d309ba701f3d0b2c14b2d39fcf3ac895ff62e39e8230fb87ff010","sha512":"521a79db5806d6cd8efe50951fbe9c24cd9e91732c39c2ccf4e4e69aa449876fa0326efea3bf8a2122bccd450327c2b50c6ce160b1b4d5f05d15924ba4a163af","ssdeep":"6144:AhXmeUjVNHdIijjlJ5Rh8H5q1hGBb4j3Bi15iKn:A4bjf9b644mC","tlshash":"14742ce8319ab6221be355e4407f0107b1792c27344c8860f268edee7ab544a95b7ffd","size":350394,"data":"","first_seen":"2026-06-20T12:33:27.426828Z","last_seen":"2026-06-20T14:06:08.489875Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/~flock.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-28T12:55:38.176261Z","times_seen":11963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/assets/styles-CWPswBem.css","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paybonuscooudmae.lovable.app/","date":"2026-06-20T12:33:02.973Z","timestamp":1781958782973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /assets/styles-CWPswBem.css HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nset-cookie: __cf_bm=4wegc6z3iPJZpp.Jxdp.dMmrnRRwjenPw5ZO3f8XyPQ-1781958782.9761271-1.0.1.1-5cNMi8HeiMqFkli4L8wCqLuA7CHDzFc9jiRcrs5K2Zh5Nn2fjgZXbSBYoS1xpT1hLM9sOIFXH_YwATbGBXvS_dhdpsbdivrZ2JPcFyVGrwJ.Tgu6OA89dBkXkQ11iIfb; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccb99c09b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69756,"size_decoded":12360,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"784f3a86a3aadcbc97e893a055b26a4b","sha1":"08d859d50745c9ad9244e8525e8f7ac5bf000fb7","sha256":"a53e4fdefb209e1b539d0a8135f8852cd491626956afd0777b19519ae94b8781","sha512":"c136042e41951c3f2a80edcb46b5b0e250871f253d507b36c565563095d362ee76e9e74264f95155cbdbd0dd397a5552e4a47370f8a22d9cbf1e156979f9280f","ssdeep":"1536:qs+kWh+kBUywXt6AcxCHsahSsMq+WDhXX7RXLPb988R988q:5+kWh+AUy86AcxuzMq+WDhJLY","tlshash":"cb63d694b229d53f7c33a4f5938cb85c811970c0dd7946edfa16a12216c3bf2adbb618","first_seen":"2026-06-20T12:33:27.424402Z","last_seen":"2026-06-20T14:06:08.483278Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/assets/index-DWNf5Suv.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paybonuscooudmae.lovable.app/","date":"2026-06-20T12:33:02.975Z","timestamp":1781958782975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /assets/index-DWNf5Suv.js HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nset-cookie: __cf_bm=4pTbCTcm7crpFeW5OhNe251e824MCq2cQ98exlo3tCY-1781958782.9778016-1.0.1.1-qeNIFSkas8TGxNiLfa2XbCGaEhGMHUCRVXBllod98bANGBe37JMptLp7Ut3RCmOXTTszNwMp6RUOQv8pJK8PwZwdwpyFCiblP13tfSg9erGSb1C_7mxKEqSsgDkn8Kfg; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccb99c0eb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350394,"size_decoded":111308,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43322)","md5":"f78a14d10c195812a703a2582a07f6a5","sha1":"b61a45bd7acba051eb4ee052c3e765433c3ab2ca","sha256":"d498edfb325d309ba701f3d0b2c14b2d39fcf3ac895ff62e39e8230fb87ff010","sha512":"521a79db5806d6cd8efe50951fbe9c24cd9e91732c39c2ccf4e4e69aa449876fa0326efea3bf8a2122bccd450327c2b50c6ce160b1b4d5f05d15924ba4a163af","ssdeep":"6144:AhXmeUjVNHdIijjlJ5Rh8H5q1hGBb4j3Bi15iKn:A4bjf9b644mC","tlshash":"14742ce8319ab6221be355e4407f0107b1792c27344c8860f268edee7ab544a95b7ffd","first_seen":"2026-06-20T12:33:27.426828Z","last_seen":"2026-06-20T14:06:08.489875Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/~flock.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paybonuscooudmae.lovable.app/","date":"2026-06-20T12:33:02.980Z","timestamp":1781958782980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=wz5J1trcfSnxs0CMPARrVSO585NjvX2XeJxd6T4QXmM-1781958782.9814997-1.0.1.1-BjWQfzwjFh6p2qHWKOn9A3XyWdhUazLWdtonTMWMlutqBenx3iZnWOhn9hY3qpmqZr26lJna5ZKFxgy.vlLtDMAvClGDo8aQUzEnyQl8NKet.n2QT6g1rUHt66_BAdEx; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccb9ac1eb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":9018,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-28T12:55:38.176261Z","times_seen":11963,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/__l5e/events.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paybonuscooudmae.lovable.app/","date":"2026-06-20T12:33:02.986Z","timestamp":1781958782986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /__l5e/events.js HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=n_aVUPkJ8pDMVpfG6Im3Sb2Y_hvBrWVhE4xXiKQ__qU-1781958782.9883883-1.0.1.1-BUo7XuEDFXE9kli42OT24hR.fNfty3QS7sFqBE2T7x8uy0YHu6NkITS1BPlk_GcAlNDPd95v.keRXJ6choiDI6VKyOXwiReKhQjkXJ3fzEGCJoNhvYmILiXlznJ8Q5el; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccb9ac2db4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44148,"size_decoded":10290,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (356)","md5":"4984c751409f378613ce4a697469eb54","sha1":"db702076417754abd5497526bb2d4326d3fc9594","sha256":"48b09309d5c937dcd3d62ffd10b47d9d4ed5926f6b96cdcdefa63099e84818fa","sha512":"32420a4ba8bc56dadddd982b9bb39cd56fc15249f7a6962f0f606a84681be20e5006554354eb317c0b5f44fa495a08a5ccffb42abbd8bdeeb4febb6530d6e393","ssdeep":"768:5+rVEje/DCjA89Huk/sk4S58W45XKxNAOtXVltoaSeSzc4R4jgcFykJ8X/cpCgAd:5buk/sk4S6etgYrXBfOVEkZovhfi7","tlshash":"aa13728878f714a30163917e5b9b810236349587354adfa4beac4d0a2fcd658e6f3fc9","first_seen":"2026-06-16T13:38:26.366748Z","last_seen":"2026-06-28T12:14:29.567384Z","times_seen":1100,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/favicon.ico","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paybonuscooudmae.lovable.app/","date":"2026-06-20T12:33:03.143Z","timestamp":1781958783143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=QJBBZ18kCYDCaiLtRGxmvoXjdEDdfg5Lsb7S4kNiiXE-1781958783.1472092-1.0.1.1-0aSD0WxE4cOST.gbzLNdrvPaRiLJKxb9lgQuAA.TpbBdAP6wSRvu_kPThFXwlSLVSNxcxSNBClybOm6TmfooQr.XXiUD02TkRlB616yOzQ5qMx71WJ.vpnapdOGJP.Wi; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccbaad7bb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2806,"size_decoded":1911,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"b26fd12cfbe34e2777b7ce17e9edd8f6","sha1":"945968b5fd7ecab8d67a3e41ff2e15e6e72d5a21","sha256":"e55292a7d3486eb666e1b3e1b3b08e5a070e4f0666c69a2dcfb7ef36e1e2eb96","sha512":"2879e1d5b1825d0a4bafe7e3365163d8df4ebc0283a1c88232d55b5c4375701ea63b2aa73513e51760b279e6902ecbd72ea08ecf78121333494732453e374fe6","ssdeep":"","tlshash":"cd5186a3cd20585a11a65934e825b184c0f8d61fc5a7de1cf6fef09f2a82fc2c577a60","first_seen":"2026-06-20T12:33:27.428767Z","last_seen":"2026-06-20T12:33:27.428767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/pixel.js.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paybonuscooudmae.lovable.app/pressel/index.html","date":"2026-06-20T12:33:03.156Z","timestamp":1781958783156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /pressel/pixel.js.js HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/pressel/index.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=kPk.US.N7pcl_MsC9PATPkUgC_RbKwICgxilo7yJyi8-1781958783.1594975-1.0.1.1-7OFvB5Aj5S1wfAfftQPEKdjClmsGF3iMl7vD3PLsZ5XFL8x92WrQnF8NjB1sRRF.tVHlsLzXdnLVH5Ej3Pvv2SyKefN_Ym71FM4J1B6XkbHkGCcH2K24e2F8UvNtzXPo; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccbabd9ab4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T12:17:38.62473Z","times_seen":16791211,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/tracking.js.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paybonuscooudmae.lovable.app/pressel/index.html","date":"2026-06-20T12:33:03.160Z","timestamp":1781958783160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /pressel/tracking.js.js HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/pressel/index.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=OTBPdTZYEF5pVsOfbgkF07rJVcCMgF4mKl5NAjLWSnA-1781958783.1623619-1.0.1.1-oggW3wbxiXQmacFuSMTtISK2XBYNR2cVcXiNeMhw.DPZQAZ_r_FKgNTxhk4wCsetgnD8adcHPpeE7KZcood5rOQUJnv6_IZ8wva13w1BKoXfZjKWKHmcjDR2g3uwNZg_; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccbacda0b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T12:17:38.62473Z","times_seen":16791211,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/front/js/main.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paybonuscooudmae.lovable.app/pressel/index.html","date":"2026-06-20T12:33:03.169Z","timestamp":1781958783169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /front/js/main.js HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/pressel/index.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nset-cookie: __cf_bm=3I9rbPhzc614pBUaX4UsV35Un.dwsKwRG0wm64SP4to-1781958783.17132-1.0.1.1-TX5dLDt.ktxtPu2OZ36eoxgCTB4EHtzhQ_gIfp9oO1hau8qUYDa6jjb5hxXEJBj6ZtRbvo1phL8U2WHGA9kTOVlXWE4ydHtggY.IaxicDJD8s8JQ2nd85B7aUkYXXJx2; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccbadda9b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":55542,"size_decoded":14138,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c62b8343ca11f6518409f9a55b81b34d","sha1":"6100070dceee8a1bb3ca6b2881fd1deac815ec1b","sha256":"1809a8da7d81a7d6df45b1b5a1d7da8c500c821d786de3a973a7cdc5eca437ba","sha512":"08fb0d9cd3526879e71dbaa7c1db56f1a5fb1f3c2f76869e9f7d36f75e43bd466bf2fba65f70c0276e3ab72d760b9864c8f7cf78b2cf2790a3505a6f0e2f9587","ssdeep":"768:tH0DvaSaLObunms/nILtmKOfJldnIgLvjgz6g4DgwWSCVAnmQUjr8OzU:tUjSObe/nILifJLtLvszj4MwMV+2AOw","tlshash":"f74383192df7002246abeabb67cb6609b23540033449cd4a3e6d43445fd4a7987bfbed","first_seen":"2026-06-20T12:33:27.430638Z","last_seen":"2026-06-20T14:06:08.478722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/waust.at/d.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paybonuscooudmae.lovable.app/pressel/index.html","date":"2026-06-20T12:33:03.171Z","timestamp":1781958783171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /waust.at/d.js HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/pressel/index.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=BNIS1HjJICSLzbrC3R_oZy6ao2fWij3LLWCoO1eLT8s-1781958783.174137-1.0.1.1-iqYupHlUC36nB77hZtXarISGoxsjB3EfGHRNnEHwfXz_psr140f.LlXAWXOSzY1E4MlDzVCSrqrG.RNBPfsRxrC_qykKj4W2eCCwdP_aAb_RjbksH7qj5pdsFlZy7IHP; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccbaddb1b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T12:17:38.62473Z","times_seen":16791211,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/__l5e/trackevents","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://paybonuscooudmae.lovable.app/","date":"2026-06-20T12:33:03.404Z","timestamp":1781958783404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/\r\nContent-Type: application/json\r\nContent-Length: 2296\r\nOrigin: https://paybonuscooudmae.lovable.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=XKzZXTdkqnMhCkRaJKvQq_IJbLjAkVppipVWLoDwPc0-1781958783.4066787-1.0.1.1-3fHfsCIkghvBRUpiSaH2UEA8EHveqst7ArPGyR3E3E75pt2YPjBI7G17Ipg_b2t4.EvixZLtesvBW1.ipJ.qXsRGFd6itLzlWaQz_rd.Og8E5DuWBrMRQE.6CYpWSza0; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\nserver: cloudflare\r\ncf-ray: a0eaccbc4f45b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":17,"size_decoded":659,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-06-28T12:14:29.53659Z","times_seen":2160,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/~api/analytics","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paybonuscooudmae.lovable.app/","date":"2026-06-20T12:33:03.443Z","timestamp":1781958783443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/\r\nContent-Type: application/json\r\nContent-Length: 349\r\nOrigin: https://paybonuscooudmae.lovable.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9; session-id=d4dcf8ca-f133-4045-bd84-fde176224844\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=8uda9feo7nQPt0UQ2JeSgpyyekFZ7raDoNNEOW94imA-1781958783.4576395-1.0.1.1-vWh7CpQs_jlbRbTo9Tjfdi2.Jyc2w5_NdsxdmBI4TQ4SYUe4swSAKRI4h7vfT_YvG51KuM7tSOUuHxFKu4lZ2pqy4UR7Ru8oYdX7IFW5RBmOWAgCE9jvbbyhLe5jRY2l; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\nserver: cloudflare\r\ncf-ray: a0eaccbc9fa7b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4,"size_decoded":654,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-06-28T12:55:38.207138Z","times_seen":11975,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T12:33:02.153Z","timestamp":1781958782153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 12:33:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=RjiX8ceLVlyEnLGY5qt9B2R844kI0ozGvPdSEXBA3.4-1781958782.240421-1.0.1.1-0nxcXm64jVqjIo4AvIi3Hkjpm6LigHLXcp1Y9bDxNZB7H73NaHaaEsEiPyuVx3Z0gWJ3qxIO_sztDj9_C1Susj5raYUDABlkscU6FPsnDqHn9zVk9Lj_yBEaI28oi7f5; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:02 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccb4fe8fb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4246,"size_decoded":2992,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"93ad6c1c5bd7dab5309b58e151e7ea84","sha1":"e2c351a874c4e2e81ae881dd471f1030de4743d5","sha256":"684d310c1c205f83a782944c9a3d47eb5b3e9e5c5b25cf22a0330f09491656f5","sha512":"c4d79dedea4ac003b59046c6990a1ac9cbb398ea60db4572487315728a5d825675ab370dc6abc9fbb6847801d22544090bdedd72647d9f5ba02bd122445df0b2","ssdeep":"96:Tm2WhDWzqW76y0jjpywVBpj5a874sBCFSyzW0Gx4I3h:whCzBiEEj9l4h1a4w","tlshash":"9291e8e3dc00483651fc59f1d421f2889071b14be6e6e99cf5bcd86d2981fc742ab961","first_seen":"2026-06-20T12:33:27.432779Z","last_seen":"2026-06-20T12:33:27.432779Z","times_seen":1,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":66,"connect":2,"send":0,"wait":505,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/assets/index-XjU9clZs.js","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paybonuscooudmae.lovable.app/","date":"2026-06-20T12:33:02.978Z","timestamp":1781958782978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /assets/index-XjU9clZs.js HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nset-cookie: __cf_bm=JoLlu1dmhRvFtohdso.8oGPn8onz0lDPRHJP4J4cDT4-1781958782.9798214-1.0.1.1-8p2YeNelpf1C5Sa0c0PdMZpDyRsQ6B00WsFxcRYXiNu70Kw8aNEDRLqJDBjYZJke9miYhIUtUiOuDTROUSvnzVNMX0FZzUChp3LRCaXqpYnVJTMx3ElD_5zzvQHO8saX; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccb99c15b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179,"size_decoded":963,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"3569fba9d64ee312955f77376a93e5d1","sha1":"b835761f36a00e845d6bf1af1b7779ff0a28290b","sha256":"39bc0bd4f59eb50b1e4c71789cb95d3f2022b9681949479d70690c2a4df77d7d","sha512":"f8c581968ecd532b5620154fb0b693d1206bbadeb72c488057f99e2bc249130bd7ab2029d1d4e032369701f9f5dd0d7942f03427ba445b009633a86fcd6f5c4f","ssdeep":"","tlshash":"ebc0c017100c31b704104400e3ed5c0265738031379d8701d230034b63710d4603cbf0","first_seen":"2026-06-20T12:33:27.434036Z","last_seen":"2026-06-20T14:06:08.484771Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/front/css/style.css","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paybonuscooudmae.lovable.app/pressel/index.html","date":"2026-06-20T12:33:03.165Z","timestamp":1781958783165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /front/css/style.css HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/pressel/index.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nset-cookie: __cf_bm=GNZg.rV9U4EBFijuaJRNX.wjToQFv4r32.aVvkjjcdc-1781958783.1684065-1.0.1.1-cEF_wIJb2YBJJJuILMIwYHyg2wstR8oIGNsnXC.2ErR7Ek2.A4Tu_Uip8J45mLPCYogI3EC_29sBl.vev5BQ8fvDknGgL2kr..9rhsy9l9IkZyF7oYSQhrzxH31k7esj; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccbacda8b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51712,"size_decoded":12528,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"8531919a629d73700404b2f6643696ad","sha1":"0335fb04b40522079776b64e63e352f59b21c201","sha256":"e246956c00f6282e29d6f6f7c2ed0dd97a9e20a8f8786062223577e65cad0447","sha512":"7faca07a28de9c5ea1e514b5699c4c2a64bf862cb77c411b1274bd8b82843cc77f35d7e4f7a3c7341f4c12cb2fea2fc4ee0b3aa7e7bf8c8fd4b6ffd353e30d3f","ssdeep":"1536:2L2ZqHnxDHm1/9/f8vUUzrDNa14X2WhwnH2b2xkuAauzE8JUcJP6v:ym1k30lWb2xkuAauBxg","tlshash":"f53392e26ba411047617caa539535f5aa76c4103a20fdcbdefe0244c8ecd395a6a3bcd","first_seen":"2026-06-20T12:33:27.434964Z","last_seen":"2026-06-20T14:06:08.477238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/images/tk-logo.png","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paybonuscooudmae.lovable.app/pressel/index.html","date":"2026-06-20T12:33:03.178Z","timestamp":1781958783178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /pressel/images/tk-logo.png HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/pressel/index.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 31243\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nset-cookie: __cf_bm=V5WyEEpAqIsMv7Ff1stA2z4f0eOwd7wTI8WnpZ_v_r4-1781958783.1812365-1.0.1.1-EqMCDLJOs8YbV7fieQBPB5Lr7Nw4cZERemoimSu2xWC4s6GMoJ3iAJDbzH_qgvrqDD8vOa_fMxhupc6zh2k_ap8nCopW0gcOiKYNudpEgVwBQndQQC5nA45LHMc70Gfq; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\nserver: cloudflare\r\ncf-ray: a0eaccbaedc4b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31243,"size_decoded":31964,"mime_type":"image/png","magic":"PNG image data, 1280 x 373, 8-bit/color RGBA, non-interlaced","md5":"21c07f08aa0149c2239c8b7c8ef2ee23","sha1":"35a5349a206f27b08252b5e9fa5ae065f0127050","sha256":"5353bf07bdf12bad90a834646172e12ca25557b7d0290b41c5e58d1880448349","sha512":"b2df2ccf2c118eb957090ca314c73e0534d4decfe26744ed23d1a31649da867459da9a2283397ef1b38761ad3f73b209d2c6095989651b35ef03fafbecbc6040","ssdeep":"768:b+4pmhy0ICKszwt+TErXJsJ2/korHy1PJn67pCXWaTG0GsoRDGTM7:Jp49ckwYNJErS1R67SWJ00RGTI","tlshash":"3ae2d0a7c9dbe9d9bc4f2cda117a69c303d625bae582b4f150b064fef652380c1d8486","first_seen":"2026-06-20T12:33:27.435787Z","last_seen":"2026-06-20T14:06:08.474165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paybonuscooudmae.lovable.app/pressel/index.html","fqdn":"paybonuscooudmae.lovable.app","domain":"paybonuscooudmae.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://paybonuscooudmae.lovable.app/","date":"2026-06-20T12:33:02.982Z","timestamp":1781958782982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 19:54:11 GMT","end":"Sat, 12 Sep 2026 20:53:58 GMT"},"fingerprint":{"sha1":"86:03:55:3D:2A:F8:C6:0B:70:F3:56:F6:B6:39:D6:F7:37:54:51:5A","sha256":"47:DA:A9:3E:D3:CB:7E:08:B1:DA:36:A2:AC:9B:8B:16:03:C9:3E:BD:07:AD:77:B0:04:81:0B:5C:E0:16:B3:3B"}}},"request":{"raw":"GET /pressel/index.html HTTP/1.1\r\nHost: paybonuscooudmae.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paybonuscooudmae.lovable.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 12:33:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: d1c6b3891dd85f28248f6a9164cbee184f89d7778f18742dae98eb82ce14b3a9\r\nset-cookie: __cf_bm=ooLKMafW2nKQgdatEejO347R34EbTFHJvRq7PMVD1Sc-1781958782.983518-1.0.1.1-hRSay21YcAzVMvtynb5kBJBPtPIvc7kmAWPz6d.9ByKL6IXHzaCCqhlt0PR5Xxix8C.J8O87ZLHkY4hsEbpwyO8Dd.NBOzUIMAFO8014MEBgz.qdypRME0ULIv4kSYGL; HttpOnly; SameSite=None; Secure; Path=/; Domain=lovable.app; Expires=Sat, 20 Jun 2026 13:03:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0eaccb9ac27b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":15021,"size_decoded":5923,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (477)","md5":"7ea7a129941187165747383173818bbb","sha1":"96aa88e98261010d07288e933f3310b86de7e49e","sha256":"6a6c4e27782c6b65ba3e096c5b07011d70f4892086b9edb4027d2573c611a50d","sha512":"02b8dfe5512c6d1e6699f975ccd6828822d305621361cb1f815a3bc4e0c4f860608ba2d9395e56da95183bce525d267408cdde62a2e027d461f26eb5c54fc475","ssdeep":"192:+lh7uC8x5QDfcEsViOOMSPYfaaLfaSZKybHWAp6xQgyTbcZ/tfr2yRvFLb5k3NsF:gduC8kDk07yPwpVFLeGUpSQvHd+","tlshash":"6a62b64d2af3001aa853e0b52ff75b0a6261d003d507cc297f9d93488fc6e89d897ba8","first_seen":"2026-06-20T12:33:27.436643Z","last_seen":"2026-06-20T14:06:08.475947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"paybonuscooudmae.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"paybonuscooudmae.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}