{"report_id":"c1862017-6eed-4865-be83-63e093e15bfb","version":6,"status":"done","tags":[],"date":"2026-03-06T09:46:26Z","url":{"schema":"http","addr":"coinbasesupportteamcenter.lovable.app","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":0,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"coinbasesupportteamcenter.lovable.app/","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"title":"Coinbase Support Center","dom":{"size":48590,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22899)","md5":"e9e52593193d8a0db40e861a47387eb4","sha1":"d0526bb13d8a613814b4b7697eda101ba80772f7","sha256":"3a014aa08caab19252605bcd351d1a2ae665382ec158dc256622aa82422971d4","sha512":"88279bd94a08eb0be6298266a9219268765114b04f3d72f0d6ff641d9670368d31fe0fbebbab5e8226bea62e68ec3786304754e121d9f284f1456b29b7534ea5","ssdeep":"768:hTeMsnB7cxksc64Jysq7vGneGiBYPYErjLLnD/IFYqYGYqkaNmFy:ZXx/c64Jysq7vQXLnD8kgmY","tlshash":"ed23da41720c163d6a27c3a8fbc8f32c9139f0d1ea564459f15d046aa3c3fe9a96fb94","dom_hash":"domhashc327eab8120c8a9a4f8ee6452cf48da7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coinbasesupportteamcenter.lovable.app","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":0,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T09:46:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-06T09:45:59Z","timestamp":1772790359,"ip_dst":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"ip_src":{"addr":"Client IP","port":56368,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO AI Service Domain (lovable .app) in TLS SNI","source":"{\"timestamp\":\"2026-03-06T09:45:59.889590+0000\",\"flow_id\":638217683972866,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":56368,\"dest_ip\":\"185.41.148.2\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2063043,\"rev\":1,\"signature\":\"ET INFO AI Service Domain (lovable .app) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2025_06_18\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0042\"],\"mitre_tactic_name\":[\"Resource_Development\"],\"mitre_technique_id\":[\"T1587\"],\"mitre_technique_name\":[\"Develop_Capabilities\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2025_06_18\"]}},\"tls\":{\"sni\":\"coinbasesupportteamcenter.lovable.app\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3444,\"start\":\"2026-03-06T09:45:59.832258+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"coinbasesupportteamcenter.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinbasesupportteamcenter.lovable.app","ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"domain_registered":"2023-05-06","domain_rank":0,"first_seen":"2026-03-06T09:46:26.787084Z","last_seen":"2026-03-06T09:46:26.787084Z","alert_count":6,"request_count":6,"received_data":454214,"sent_data":4102,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-03-04T21:57:05.946745Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn.gpteng.co","ip":{"addr":"104.18.29.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":776423,"first_seen":"2024-12-08T00:48:33.877309Z","last_seen":"2026-03-02T20:12:07.534574Z","alert_count":0,"request_count":1,"received_data":134511,"sent_data":574,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"18.193.231.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-03-04T21:57:05.878487Z","alert_count":0,"request_count":1,"received_data":379,"sent_data":567,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinbasesupportteamcenter.lovable.app/assets/index-DorBA_tz.js","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"73738a938e880851250ebe643237cae3","sha1":"44955fc383f84b32b112fd675570efa14eb1ba1c","sha256":"c9244c5a62c45f830a62e1c43879dd4ab093df16fb5146e102e2143b3d53058a","sha512":"75a7b19b212fbee1a5c9213178baac012673318bd169a6a6d183ff9ffa95e5a91841a9576703f306847c9904134bc6ad3a15e6ad1cc0ddbdd652ee36002a13d7","ssdeep":"6144:ygutPTBC8pd0YOog5b3QDtZ5mpfEBmR+ugel3OQQL:y7vOokb3QDt84mcugeAX","tlshash":"2c747dd8305ab1756bb386a2407f811b723d2912780d8420f12dedae77b1645a1bbffd","size":338725,"data":"","first_seen":"2026-03-06T09:46:28.416892Z","last_seen":"2026-03-06T10:21:46.556599Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasesupportteamcenter.lovable.app/~flock.js","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-09T01:17:25.544345Z","times_seen":10268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-04-19T18:18:50.439045Z","times_seen":4264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasesupportteamcenter.lovable.app/","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2acd3d73bbc8d3ba3f35629bb52bdc87","sha1":"1ceb5cdb1aaef828d045f93c024d676b2a173ff5","sha256":"b6ca917f8a08af4a6ad8cc558c1aa032e1e0648b79ce297747c7f6d3a6693807","sha512":"087546aae007202ed3509d48e832308255bf2c81f32242f4fcfc51a4bd81b653856059e7c9abfa88b9fadaa45ed3857d59acc885222f8d6f2234942b235402f7","ssdeep":"","tlshash":"9801afcbe7ec623243a5b4b9185aa5dd3e3800f0eb005bb61c744db43394d5d002ee81","size":829,"data":"","first_seen":"2026-01-07T03:19:54.535133Z","last_seen":"2026-06-07T05:26:16.21982Z","times_seen":947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinbasesupportteamcenter.lovable.app/assets/index-DorBA_tz.js","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbasesupportteamcenter.lovable.app/","date":"2026-03-06T09:46:00.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /assets/index-DorBA_tz.js HTTP/1.1\r\nHost: coinbasesupportteamcenter.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbasesupportteamcenter.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=EGiZHqpYPVdh8PJzL6BaDSNpheC9e56ZYXd3oGkPK80-1772790359.9193532-1.0.1.1-CWlJKjNC62yE0d3PfnYQPH08tMzukXMzQD4DCTrxLpnyN8gz0sLG5l39rsCTssM5oOnLNyTkBzt6KQJUxTYIMNSqxrBKLPysVCMon86S7Qg9.JXpSeKA6AFXI0tszlgC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:46:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"73738a938e880851250ebe643237cae3\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d806e489f6dd82d-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338725,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"73738a938e880851250ebe643237cae3","sha1":"44955fc383f84b32b112fd675570efa14eb1ba1c","sha256":"c9244c5a62c45f830a62e1c43879dd4ab093df16fb5146e102e2143b3d53058a","sha512":"75a7b19b212fbee1a5c9213178baac012673318bd169a6a6d183ff9ffa95e5a91841a9576703f306847c9904134bc6ad3a15e6ad1cc0ddbdd652ee36002a13d7","ssdeep":"6144:ygutPTBC8pd0YOog5b3QDtZ5mpfEBmR+ugel3OQQL:y7vOokb3QDt84mcugeAX","tlshash":"2c747dd8305ab1756bb386a2407f811b723d2912780d8420f12dedae77b1645a1bbffd","first_seen":"2026-03-06T09:46:28.416892Z","last_seen":"2026-03-06T10:21:46.556599Z","times_seen":2,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"coinbasesupportteamcenter.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbasesupportteamcenter.lovable.app/","date":"2026-03-06T09:46:00.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbasesupportteamcenter.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:46:00 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e153-4684\"\r\nexpires: Fri, 06 Mar 2026 09:47:41 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:23 GMT\r\nx-77-nzt: EwwBuUwJGwH3EAAAAAwBuUwKCQH3AQAAAAwBJRPCNAW1AAAAAA\r\nx-77-nzt-ray: fdb541233105932d58a2aa6967c6002d\r\nx-77-cache: HIT\r\nx-77-age: 16\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-04-19T18:18:50.439045Z","times_seen":4264,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":46,"dns":20,"connect":8,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasesupportteamcenter.lovable.app/~flock.js","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbasesupportteamcenter.lovable.app/","date":"2026-03-06T09:46:00.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: coinbasesupportteamcenter.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbasesupportteamcenter.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=EGiZHqpYPVdh8PJzL6BaDSNpheC9e56ZYXd3oGkPK80-1772790359.9193532-1.0.1.1-CWlJKjNC62yE0d3PfnYQPH08tMzukXMzQD4DCTrxLpnyN8gz0sLG5l39rsCTssM5oOnLNyTkBzt6KQJUxTYIMNSqxrBKLPysVCMon86S7Qg9.JXpSeKA6AFXI0tszlgC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:46:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d806e489f77d82d-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-09T01:17:25.544345Z","times_seen":10268,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"coinbasesupportteamcenter.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasesupportteamcenter.lovable.app/assets/index-Cbof6xas.css","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbasesupportteamcenter.lovable.app/","date":"2026-03-06T09:46:00.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /assets/index-Cbof6xas.css HTTP/1.1\r\nHost: coinbasesupportteamcenter.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbasesupportteamcenter.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=EGiZHqpYPVdh8PJzL6BaDSNpheC9e56ZYXd3oGkPK80-1772790359.9193532-1.0.1.1-CWlJKjNC62yE0d3PfnYQPH08tMzukXMzQD4DCTrxLpnyN8gz0sLG5l39rsCTssM5oOnLNyTkBzt6KQJUxTYIMNSqxrBKLPysVCMon86S7Qg9.JXpSeKA6AFXI0tszlgC\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:46:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"159b53f9c642853eda32a32fedbef8b4\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d806e489f75d82d-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60336,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (60335)","md5":"159b53f9c642853eda32a32fedbef8b4","sha1":"9ee2cac84f6aa8ea6a0a078ff61280269b769ef5","sha256":"3cb01429fa54e2f032965de117eea9bda26ad54823804d627cf5ae57fb8d283c","sha512":"a6add26b234ec7c764b133716dc5bcfb79784ec11abe004916fba390955295a10ea33e9d9d054b17341683eedf47c19046e1fe7047b89d737140fd32ab7230a0","ssdeep":"1536:6gF3rhf4YckUULaGPCa378VQZkt5FNCo4X:6gF3rhfYkUULaGPCa378VQZkt5Ff4X","tlshash":"c843a51ab919617e3c2b90e883ccb9ec510ef0c0dd3b05b5be9a81316ad37f619b7548","first_seen":"2026-03-06T09:46:28.419175Z","last_seen":"2026-03-06T10:21:46.557586Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"coinbasesupportteamcenter.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gpteng.co/mcp-widgets/v1/fonts/CameraPlainVariable.woff2","fqdn":"cdn.gpteng.co","domain":"gpteng.co","tld":"co"},"ip":{"addr":"104.18.29.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbasesupportteamcenter.lovable.app/","date":"2026-03-06T09:46:00.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gpteng.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:44:27 GMT","end":"Thu, 14 May 2026 18:44:26 GMT"},"fingerprint":{"sha1":"94:AF:12:43:D1:04:A1:14:33:F3:1A:48:40:89:E7:94:EE:8C:2C:C6","sha256":"B0:70:CD:E5:CC:40:86:A6:E1:41:07:C4:5C:88:49:CF:85:92:FF:D0:51:57:1B:EE:25:66:4A:3B:5B:1F:74:90"}}},"request":{"raw":"GET /mcp-widgets/v1/fonts/CameraPlainVariable.woff2 HTTP/1.1\r\nHost: cdn.gpteng.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://coinbasesupportteamcenter.lovable.app/\r\nOrigin: https://coinbasesupportteamcenter.lovable.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:46:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 133760\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=14400\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"c48bd2439e2921fc4d3aaef0e57446be\"\r\nlast-modified: Wed, 10 Dec 2025 13:46:40 GMT\r\nvary: Origin, Accept-Encoding\r\nset-cookie: __cf_bm=RM3HXlQabP_bqU9W0vUzJaZwmZV85cqj3nnA80JThek-1772790360.5707047-1.0.1.1-BKMluInGVLBNNy91OmcB1VDezAI9enBdUGCLJL.Lq6dnwFgKDfQvCivT1_91uU1kYCMQeGhWjI3STqmLCOQ3dTffN3lUpPLcp5TqNnnJ3OKf4kvgPg676hpyrbcLa9F6; HttpOnly; Secure; Path=/; Domain=gpteng.co; Expires=Fri, 06 Mar 2026 10:16:00 GMT\r\nexpires: Fri, 06 Mar 2026 13:46:00 GMT\r\ncf-ray: 9d806e4989a975ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133760,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 133760, version 2.0","md5":"c48bd2439e2921fc4d3aaef0e57446be","sha1":"396596764aebbe25ba1c45f19091f48a7e17a9e5","sha256":"0f4491b0f9f6b9c3e6054a9f0036583e3978fd3a8d8f49ba5da05d63cf875cbb","sha512":"cb9ff1ede5ea280e8586c3e6e84c68685b3749fa492fb1babef3d0bb72ab1b095b1c00531554ead12e31139f226c7aa96399b11fd6ae256ea134639d98d95b64","ssdeep":"3072:OWSP0iIzCkvibLej77I/9GRBm7Xy2TJ46tNP7HlgXffTp/CGZ7YpV/z:OdYGkviXe7l87C2XtBC1/CGin/z","tlshash":"d9d3123e2ad0e463aba505b13a7f65808a2e5f11e3c773c145b274cfd5302a8236da7d","first_seen":"2025-04-23T20:37:12.507957Z","last_seen":"2026-06-08T17:57:29.289821Z","times_seen":1059,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":48,"dns":20,"connect":1,"send":0,"wait":68,"receive":9,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasesupportteamcenter.lovable.app/favicon.ico","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasesupportteamcenter.lovable.app/","date":"2026-03-06T09:46:00.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: coinbasesupportteamcenter.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbasesupportteamcenter.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=EGiZHqpYPVdh8PJzL6BaDSNpheC9e56ZYXd3oGkPK80-1772790359.9193532-1.0.1.1-CWlJKjNC62yE0d3PfnYQPH08tMzukXMzQD4DCTrxLpnyN8gz0sLG5l39rsCTssM5oOnLNyTkBzt6KQJUxTYIMNSqxrBKLPysVCMon86S7Qg9.JXpSeKA6AFXI0tszlgC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:46:00 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"9f504444f85a5af2eef9264b02ae40be\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d806e4aff8fd82d-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20373,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"9f504444f85a5af2eef9264b02ae40be","sha1":"dd15dcde9da684402cd56070688bc4d18d2ebb46","sha256":"dd821076a9b03adc2173c93956226aea3d92482d7578fc4339c5d3a2e9c24586","sha512":"e5dbd729746c77d5ec72483a822c6df608086e5877a1ac146cd3e347a2fcaf50af6c561fc4477923925e9bc9d81b65010e911a40b830a637fddd666972b6651d","ssdeep":"384:zvAOjbCDJfSLloocQmVv1Abb/ttPoGwktQ5nuxFqgrssRi:zoiOJfMoNQmVv1AXbXGZu4","tlshash":"3792d10db18eb66d4ff5819bd0f8e53d42c71aa4b4232282cc8229f15db78dd63d2b59","first_seen":"2025-12-01T00:59:47.52305Z","last_seen":"2026-06-08T23:29:40.634772Z","times_seen":2156,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"coinbasesupportteamcenter.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/62c003c6c2b716d5479e754df434994067920852.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"18.193.231.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasesupportteamcenter.lovable.app/","date":"2026-03-06T09:46:00.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/62c003c6c2b716d5479e754df434994067920852.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbasesupportteamcenter.lovable.app/\r\nContent-Type: text/plain\r\nOrigin: https://coinbasesupportteamcenter.lovable.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 06 Mar 2026 09:46:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-06-08T23:37:45.580859Z","times_seen":2966,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":202,"dns":14,"connect":21,"send":0,"wait":24,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasesupportteamcenter.lovable.app/~api/analytics","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasesupportteamcenter.lovable.app/","date":"2026-03-06T09:46:00.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: coinbasesupportteamcenter.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbasesupportteamcenter.lovable.app/\r\nContent-Type: application/json\r\nContent-Length: 358\r\nOrigin: https://coinbasesupportteamcenter.lovable.app\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=EGiZHqpYPVdh8PJzL6BaDSNpheC9e56ZYXd3oGkPK80-1772790359.9193532-1.0.1.1-CWlJKjNC62yE0d3PfnYQPH08tMzukXMzQD4DCTrxLpnyN8gz0sLG5l39rsCTssM5oOnLNyTkBzt6KQJUxTYIMNSqxrBKLPysVCMon86S7Qg9.JXpSeKA6AFXI0tszlgC; session-id=13a5fc23-4f4c-47d8-b085-022a137083c8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":358,"data":"{\"timestamp\":\"2026-03-06T09:46:00.905Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"13a5fc23-4f4c-47d8-b085-022a137083c8\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://coinbasesupportteamcenter.lovable.app/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:46:01 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d806e4bca4cd82d-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-06-09T01:17:25.527606Z","times_seen":10308,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"coinbasesupportteamcenter.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasesupportteamcenter.lovable.app/","fqdn":"coinbasesupportteamcenter.lovable.app","domain":"coinbasesupportteamcenter.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.2","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T09:45:59.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbasesupportteamcenter.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:46:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=EGiZHqpYPVdh8PJzL6BaDSNpheC9e56ZYXd3oGkPK80-1772790359.9193532-1.0.1.1-CWlJKjNC62yE0d3PfnYQPH08tMzukXMzQD4DCTrxLpnyN8gz0sLG5l39rsCTssM5oOnLNyTkBzt6KQJUxTYIMNSqxrBKLPysVCMon86S7Qg9.JXpSeKA6AFXI0tszlgC; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Fri, 06 Mar 2026 10:16:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"33315960335c91479e9cc62530af235b\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d806e457b81d82d-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10952,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2980)","md5":"c2c06ecf333e9bfc8707310693a5decb","sha1":"0955081e066352ab2cd2c42edf03b274a457372f","sha256":"9de86c74c1f3465ec067f63e9e41941858db9f2145395962b7591eb3293353b8","sha512":"a096f678f2d558e037c8eb66277ed897bd85f38a6e12bfdc3a6b9fbe2fd7ef868a9925f546ef3a17cc153a2ce88f93ff826d1a4dabb9c30569b4ded612edd2cc","ssdeep":"96:c7xux/0mmTU15OA3lghaoX9DSjxpeHTwGIW16mg2+3wehaBQ8VjKx3NuZkTmB0q9:cy/1mTUqYvuIGPjywAcQSyUZxBH73YXQ","tlshash":"9a32c7c2c364b53d9351c1bcbfe9f8c4576a90f3ea448de2b89e097906c7698e107e90","first_seen":"2026-03-06T09:46:28.422211Z","last_seen":"2026-03-06T10:21:46.560975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":79,"dns":9,"connect":27,"send":0,"wait":289,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"coinbasesupportteamcenter.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}